Date: Thu, 21 Aug 2014 10:53:30 -0500 From: Bryan Drewery <bdrewery@FreeBSD.org> To: Mark Martinec <Mark.Martinec+freebsd@ijs.si>, freebsd-ports@freebsd.org Cc: freebsd-current@freebsd.org Subject: Re: [CFT] SSP Package Repository available Message-ID: <53F615FA.6030604@FreeBSD.org> In-Reply-To: <b2e18bbe12ba52752d97a2189b436a47@mailbox.ijs.si> References: <523D79CD.2090302@FreeBSD.org> <53F4CE0E.8040106@FreeBSD.org> <CAE2yjrqjNj1EJNZAa2FTfNyimpKpEXMdEyn9kdFH8PgqrTT8YQ@mail.gmail.com> <b2e18bbe12ba52752d97a2189b436a47@mailbox.ijs.si>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --L1d2c6nOepHLleWSrekLTAvqL04Om3dD6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 8/21/2014 5:34 AM, Mark Martinec wrote: > Bryan Drewery wrote: >> Ports now support enabling Stack Protector [1] support on FreeBSD 10 >> i386 and amd64, and older releases on amd64 only currently. >> >> Support may be added for earlier i386 releases once all ports properly= >> respect LDFLAGS. >> >> To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all p= orts. >> >> The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all= >> may optionally be set instead. >=20 > That's probably SSP_CFLAGS, not SSP_CLFAGS. Nice find. >=20 >=20 > Does clang (in 10-STABLE or CURRENT) support also the > option -fstack-protector-strong ? Not sure if clang 3.4 has it, but I found a patch for it here: https://github.com/archlinuxarm/PKGBUILDs/blob/master/extra/llvm/clang-3.= 4-fstack-protector-strong.patch >=20 > Is 'world' by default compiled with -fstack-protector > (and if not, why not). World has been built with -fstack-protector by default since 2008. At least in 8.0+. >=20 > Mark > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.o= rg" --=20 Regards, Bryan Drewery --L1d2c6nOepHLleWSrekLTAvqL04Om3dD6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJT9hX6AAoJEDXXcbtuRpfP3+kH/09KAmslS64jiMpM2X0VttAo S/f1J87gCQnIdNbH5NWwZjHxBWOuaSoMnMywVqX1v5YirINi2kmmWAqD6owmjdux ZlvfK7Ne9u1eGJE4adHnoNPsqpDH5rKK/fKvbD1H6KClJkD3+Eo4hMpGF4a5rgQT +RawXpJEC4xR3dFoP6rM7BPHwrkVYJdpcB7xluycuJa4URZtjML7Ps1Mf/QMmohQ fz9m2eTnGATBlyWXeoBo7lhrS12O8CXCx+cHqQ/dMFAzHU/ux3A/Pa3cXxMx7T8J Z3kZCBZNqFuIC8BGMWL5Bs8/YqQrA+G/TUliVE+Hmj2hkB8jaNHn19aR+r4IyA8= =5zS+ -----END PGP SIGNATURE----- --L1d2c6nOepHLleWSrekLTAvqL04Om3dD6--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53F615FA.6030604>