Date: Tue, 12 Aug 2003 22:49:33 +0200 From: "Devon H. O'Dell" <dodell@sitetronics.com> To: "'Kris Kennaway'" <kris@obsecurity.org>, "'Jacques A. Vidrine'" <nectar@FreeBSD.org>, "'Jason Stone'" <freebsd-security@dfmm.org>, <security@freebsd.org>, <kris@FreeBSD.org> Subject: RE: realpath(3) et al Message-ID: <000e01c36113$3c6f8400$9f8d2ed5@internal> In-Reply-To: <20030812204804.GC49087@rot13.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
If you guys are too busy for maintaining this port, shall I take on this burden? --Devon > -----Oorspronkelijk bericht----- > Van: Kris Kennaway [mailto:kris@obsecurity.org] > Verzonden: Tuesday, August 12, 2003 10:48 PM > Aan: Jacques A. Vidrine; Devon H. O'Dell; 'Jason Stone'; > security@freebsd.org; kris@FreeBSD.org > Onderwerp: Re: realpath(3) et al >=20 > On Tue, Aug 12, 2003 at 02:59:46PM -0500, Jacques A. Vidrine wrote: > > On Tue, Aug 12, 2003 at 01:59:51PM +0200, Devon H. O'Dell wrote: > > > In any case, IBM has a stack smashing protection patch for GCC 3.3 = on > > > FreeBSD 4.8 available at > > > http://www.trl.ibm.com/projects/security/ssp/buildfreebsd.html = (the > > > description page is at = http://www.trl.ibm.com/projects/security/ssp/). > It > > > currently works in the latest cvsupped source from 5.1 as well = (I've > built > > > and tested it). > > > > http://www.research.ibm.com/trl/projects/security/ssp/ has the = latest. > > Yes, I'd like to see this in the base system as well. Our toolchain > > in 5.x is calming down a bit, maybe the timing is getting ripe. > > > > I thought Kris looked into this before, but I don't recall what = might > > have ultimately stopped him from making the commits. cc:ing him in > > case he has insight to share. >=20 > The gcc maintainer (David O'Brien at the time) was unwilling to > support the burden of an external gcc patch which would need to be > re-integrated by him each time a new gcc version was imported. >=20 > Instead, we agreed that the best solution was to make a port that uses > this patch, which can be updated periodically as the SSP authors track > new gcc releases. Neither of us followed through on this though. >=20 > Kris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000e01c36113$3c6f8400$9f8d2ed5>