[CFT] SSP Package Repository available
Bryan Drewery
bdrewery at FreeBSD.org
Thu Aug 21 15:53:39 UTC 2014
On 8/21/2014 5:34 AM, Mark Martinec wrote:
> Bryan Drewery wrote:
>> Ports now support enabling Stack Protector [1] support on FreeBSD 10
>> i386 and amd64, and older releases on amd64 only currently.
>>
>> Support may be added for earlier i386 releases once all ports properly
>> respect LDFLAGS.
>>
>> To enable, just add WITH_SSP=yes to your make.conf and rebuild all ports.
>>
>> The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all
>> may optionally be set instead.
>
> That's probably SSP_CFLAGS, not SSP_CLFAGS.
Nice find.
>
>
> Does clang (in 10-STABLE or CURRENT) support also the
> option -fstack-protector-strong ?
Not sure if clang 3.4 has it, but I found a patch for it here:
https://github.com/archlinuxarm/PKGBUILDs/blob/master/extra/llvm/clang-3.4-fstack-protector-strong.patch
>
> Is 'world' by default compiled with -fstack-protector
> (and if not, why not).
World has been built with -fstack-protector by default since 2008. At
least in 8.0+.
>
> Mark
> _______________________________________________
> freebsd-current at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-current
> To unsubscribe, send any mail to "freebsd-current-unsubscribe at freebsd.org"
--
Regards,
Bryan Drewery
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20140821/0e776604/attachment.sig>
More information about the freebsd-ports
mailing list