[CFT/HEADSUP] Ports now have Stack Protector support

[Bryan Drewery]

On 9/21/2013 9:26 AM, Nathan Whitehorn wrote:
> On 09/21/13 09:09, Bryan Drewery wrote:
>> On 9/21/2013 9:00 AM, Nathan Whitehorn wrote:
>>> On 09/21/13 05:47, Bryan Drewery wrote:
>>>> Ports now support enabling Stack Protector [1] support on FreeBSD 10
>>>> i386 and amd64, and older releases on amd64 only currently.
>>>>
>>> Why only those architectures?
>>> -Nathan
>> I was only able to test on amd64 and i386. And that took 37 exp-runs
>> over a month.
>>
>> See commit and CHANGES for more discussion on why not i386 on <10:
>>
>> http://svnweb.freebsd.org/ports?view=revision&revision=327697
>>
> 
> OK. If I set this on powerpc anyway, will it turn on? I'm happy to
> (slowly) test it there.
> -Nathan

You will need to modify Mk/bsd.ssp.mk to allow it. It would be great to
get feedback on it!

Like so:

>  .if defined(WITH_SSP) && !defined(WITHOUT_SSP) && !defined(SSP_UNSAFE) && \
> -    (${ARCH} == i386 || ${ARCH} == amd64)
> +    (${ARCH} == i386 || ${ARCH} == amd64 || ${ARCH} == powerpc)
>  # Overridable as a user may want to use -fstack-protector-all


-- 
Regards,
Bryan Drewery

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 899 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20130921/80c6386f/attachment.sig>