Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 7 Jul 2008 15:50:17 +0400
From:      Stanislav Sedov <stas@FreeBSD.org>
To:        Ruslan Ermilov <ru@FreeBSD.org>
Cc:        arm@FreeBSD.org, cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src Makefile.inc1 src/gnu/lib Makefile src/gnu/lib/csu Makefile src/gnu/lib/libssp Makefile src/lib/csu Makefile.inc src/lib/libc Makefile src/lib/libstand Makefile src/lib/libthr Makefile src/libexec/rtld-elf Makefile src/release Makefile ...
Message-ID:  <20080707155017.6850f3a5.stas@FreeBSD.org>
In-Reply-To: <200806252138.m5PLcajG067917@repoman.freebsd.org>
References:  <200806252138.m5PLcajG067917@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
--Signature=_Mon__7_Jul_2008_15_50_17_+0400_.6RIoY2=y8UbqJsY
Content-Type: text/plain; charset=US-ASCII
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, 25 Jun 2008 21:33:28 +0000 (UTC)
Ruslan Ermilov <ru@FreeBSD.org> mentioned:

> ru          2008-06-25 21:33:28 UTC
>=20
>   FreeBSD src repository
>=20
>   Modified files:
>     .                    Makefile.inc1=20
>     gnu/lib              Makefile=20
>     gnu/lib/csu          Makefile=20
>     gnu/lib/libssp       Makefile=20
>     lib/libc             Makefile=20
>     lib/libstand         Makefile=20
>     lib/libthr           Makefile=20
>     libexec/rtld-elf     Makefile=20
>     release              Makefile=20
>     release/picobsd/build picobsd=20
>     rescue/librescue     Makefile=20
>     rescue/rescue        Makefile=20
>     share/mk             bsd.sys.mk=20
>     sys/boot/arm/at91    Makefile.inc=20
>     sys/boot/efi         Makefile.inc=20
>     sys/boot/i386        Makefile.inc=20
>     sys/boot/i386/loader Makefile=20
>     sys/boot/ia64        Makefile.inc=20
>     sys/boot/ia64/common Makefile=20
>     sys/boot/ia64/efi    Makefile=20
>     sys/boot/ia64/ski    Makefile=20
>     sys/boot/pc98        Makefile.inc=20
>     sys/boot/pc98/loader Makefile=20
>     sys/boot/powerpc/ofw Makefile=20
>     sys/boot/sparc64     Makefile.inc=20
>     sys/boot/sparc64/loader Makefile=20
>     sys/conf             files kern.mk kern.pre.mk=20
>     tools/build/options  WITHOUT_SSP=20
>   Added files:
>     lib/csu              Makefile.inc=20
>     sys/boot             Makefile.inc=20
>     sys/boot/arm         Makefile.inc=20
>     sys/boot/ofw         Makefile.inc=20
>     sys/boot/powerpc     Makefile.inc=20
>     sys/boot/uboot       Makefile.inc=20
>     sys/kern             stack_protector.c=20
>   Log:
>   SVN rev 180012 on 2008-06-25 21:33:28Z by ru
>  =20
>   Enable GCC stack protection (aka Propolice) for userland:
>   - It is opt-out for now so as to give it maximum testing, but it may be
>     turned opt-in for stable branches depending on the consensus.  You
>     can turn it off with WITHOUT_SSP.
>   - WITHOUT_SSP was previously used to disable the build of GNU libssp.
>     It is harmless to steal the knob as SSP symbols have been provided
>     by libc for a long time, GNU libssp should not have been much used.
>   - SSP is disabled in a few corners such as system bootstrap programs
>     (sys/boot), process bootstrap code (rtld, csu) and SSP symbols themse=
lves.
>   - It should be safe to use -fstack-protector-all to build world, however
>     libc will be automatically downgraded to -fstack-protector because it
>     breaks rtld otherwise.
>   - This option is unavailable on ia64.
>  =20
>   Enable GCC stack protection (aka Propolice) for kernel:
>   - It is opt-out for now so as to give it maximum testing.
>   - Do not compile your kernel with -fstack-protector-all, it won't work.
>  =20

This break world on at91rm9200 and, probably, on other arm targets.
I haven't digged into the problem deeply, but the kernel doesn't seem to
be able to execute any ssp-enabled binaries (coredumps with bus error).

--=20
Stanislav Sedov
ST4096-RIPE

--Signature=_Mon__7_Jul_2008_15_50_17_+0400_.6RIoY2=y8UbqJsY
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (FreeBSD)

iEYEARECAAYFAkhyAv8ACgkQK/VZk+smlYH7wgCdEDhyxBb/XIihWFzg1u6dm6EG
xYgAn3pCjUvTzsfePCxwO8OTlLMYn9EB
=H2uL
-----END PGP SIGNATURE-----

--Signature=_Mon__7_Jul_2008_15_50_17_+0400_.6RIoY2=y8UbqJsY--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080707155017.6850f3a5.stas>