From owner-freebsd-current@FreeBSD.ORG Fri Feb 8 03:01:04 2013 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 9168A718 for ; Fri, 8 Feb 2013 03:01:04 +0000 (UTC) (envelope-from lists@eitanadler.com) Received: from mail-pa0-f54.google.com (mail-pa0-f54.google.com [209.85.220.54]) by mx1.freebsd.org (Postfix) with ESMTP id 6C214FA3 for ; Fri, 8 Feb 2013 03:01:04 +0000 (UTC) Received: by mail-pa0-f54.google.com with SMTP id fa10so1758304pad.13 for ; Thu, 07 Feb 2013 19:01:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eitanadler.com; s=0xdeadbeef; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=3rNxy1C8i1YIkOqBO9HkiqvSlCfnKD4qJ0zEFioThDQ=; b=bUEDBEo7cAt8ScDpXwLS9bf0WMvVWq6HvtsDdBwHPzag5YsRxOSTczYhSPaHZ2iwFa qqR6CDC8zg3hNRIw2n1qlPY95hqnDAwWpeUY7jI+qwyCGWz0Go7dwt90+TexTy8ldZU5 yknx0EPwaI6kMSNBkLOsFpyl5wcqzu7gZ+9BU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type:x-gm-message-state; bh=3rNxy1C8i1YIkOqBO9HkiqvSlCfnKD4qJ0zEFioThDQ=; b=Z1wljdPyPVjOwVftIfGMWsx6Fwr9n7gSjwftDrhkQSJE2410roEQfKE++rd9nioxsp 0o3yAx9Xu6WXrtbBBtGdcYt0Jk2HVCCCIcyYcHiyzoUXf5wgIBai7XiJEidELYMhJhB/ tLJLqdyua04iUGHgXp0kR1lHslkQH4sPUQpvBcDooOFzQxw1T+2iB2peIsln5zlqKcyK NrhVAP9cQ5D8EwFLICPS9NRie91FBg3PcXE6B1nLsCI9gOd6TwXM3TJ4wIbhlH9aht/Y OhNy+ON2y8c5D646ayScX1u7/K33FAY+pA5YnMeiunotFHIWKeX9Q2m91xnjsZJL5cma uVWg== X-Received: by 10.66.74.234 with SMTP id x10mr12482564pav.10.1360292463250; Thu, 07 Feb 2013 19:01:03 -0800 (PST) MIME-Version: 1.0 Received: by 10.66.148.10 with HTTP; Thu, 7 Feb 2013 19:00:33 -0800 (PST) In-Reply-To: References: <51141769.5060905@FreeBSD.org> From: Eitan Adler Date: Thu, 7 Feb 2013 22:00:33 -0500 Message-ID: Subject: Re: CLANG and -fstack-protector To: Kimmo Paasiala Content-Type: text/plain; charset=UTF-8 X-Gm-Message-State: ALoCoQmYjv72OMQGSDWpwejL+cpqwj456vnE4AxjuUN0s6pmQtefrpRU6KWpiOvZg8b37OXGjrr0 Cc: freebsd-stable@freebsd.org, FreeBSD current , Dimitry Andric X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Feb 2013 03:01:04 -0000 On 7 February 2013 18:40, Kimmo Paasiala wrote: >> Ports are largely independent of the base system, and their compilation >> flags are different from port to port. You could set -fstack-protector >> for your ports in either make.conf or ports.conf, if you wanted. > > Is there any work being done to provide an optional Makefile knob > (WITH_STACK_PROTECTOR ?) to turn on -fstack-protector for ports that > install network services (or other critical code)? I'd bet such > feature would be popular. As far as I am aware no such feature exists. In any case it would be subject to the same problem of many ports ignoring CFLAGS and friends. -- Eitan Adler