SafeStack in base

[Conrad Meyer]

On Wed, Jul 27, 2016 at 5:05 PM, Shawn Webb <shawn.webb at hardenedbsd.org> wrote:
> On Wed, Jul 27, 2016 at 05:02:07PM -0700, Conrad Meyer wrote:
>> The problem appears to be an upstream limitation of
>> -fsanitize=safe-stack: "Most programs, static libraries, or individual
>> files can be compiled with SafeStack as is. ??? Linking a DSO with
>> SafeStack is not currently supported." [0]
>>
>> That probably needs to be addressed upstream before it can be enabled globally.
>
> Gotcha. If I'm reading correctly, then, SafeStack can only be enabled in
> bsd.prog.mk (and _not_ bsd.lib.mk). Is that correct?

That is my reading of the page.  I'll admit my total experience with
-fsanitize=safe-stack is limited to glancing at the web page 5 minutes
ago, so don't consider my take authoritative.

Best,
Conrad