From owner-freebsd-current@FreeBSD.ORG Wed Dec 12 03:04:19 2007 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B3C3E16A421 for ; Wed, 12 Dec 2007 03:04:19 +0000 (UTC) (envelope-from qpadla@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.190]) by mx1.freebsd.org (Postfix) with ESMTP id 3B01713C465 for ; Wed, 12 Dec 2007 03:04:18 +0000 (UTC) (envelope-from qpadla@gmail.com) Received: by nf-out-0910.google.com with SMTP id b2so59731nfb.33 for ; Tue, 11 Dec 2007 19:04:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:reply-to:to:subject:date:user-agent:cc:references:in-reply-to:mime-version:content-type:content-transfer-encoding:message-id; bh=FGzSv73+k4zIrjuB00dYfMM5IAmmQduZU4BOPgj38aA=; b=dka0JW2diFEsiopTUvW/bz1Cq8eMugSJO4khHID3M0tXmjS8VslBD2JfrByi6qt0O2UMNBqz+hYQmJ6BCa8wrio4K2lO11gnGjX4qwSLm+1+92OdAc5joipDhvtMVybz7syEY9Xzqh785LG940GLCsP2LdQmTl7hfTTkBBBy9i4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:reply-to:to:subject:date:user-agent:cc:references:in-reply-to:mime-version:content-type:content-transfer-encoding:message-id; b=Ervcb7vdGn8oLhelXDLKILPzJA3HysQa6fi1R4jw3MqbkncwqT/Q1h9ceXUS1X3eqFj3lVCQfVVF+A51zULB4fh5/UpGbwkiUaE95OwJelYTCVISmALOTtlAiioajPxAT7G9gFsKS4auPI6jt4UzmsDZLjO1gggdh3mNM9AfkYQ= Received: by 10.86.91.12 with SMTP id o12mr138882fgb.55.1197428657082; Tue, 11 Dec 2007 19:04:17 -0800 (PST) Received: from 77-109-39-227.dynamic.peoplenet.ua ( [77.109.39.227]) by mx.google.com with ESMTPS id p38sm7616309fke.2007.12.11.19.04.13 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 11 Dec 2007 19:04:16 -0800 (PST) From: Nikolay Pavlov To: freebsd-current@freebsd.org Date: Wed, 12 Dec 2007 05:04:19 +0200 User-Agent: KMail/1.9.6 (enterprise 0.20070907.709405) References: <20071211221318.GB47521@obiwan.tataz.chchile.org> In-Reply-To: <20071211221318.GB47521@obiwan.tataz.chchile.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart7267659.BUuPRfjGbe"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200712120504.19496.qpadla@gmail.com> Cc: Jeremie Le Hen Subject: Re: Patch to enable SSP on RELENG_7/CURRENT by default X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: qpadla@gmail.com List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Dec 2007 03:04:19 -0000 --nextPart7267659.BUuPRfjGbe Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Wednesday 12 December 2007 00:13:18 Jeremie Le Hen wrote: > Hi list, > > I already posted a couple of month ago for a patch to bring in > ProPolice/SSP into 6-STABLE and 7-CURRENT [1]. Understandably, it has > never been commited because this required to heavily patch GCC 3.4.6, > which is a contributed software. > > Now that RELENG_7 and CURRENT have GCC 4.2.1, which provides SSP, > FreeBSD just lacks the "glue" bits to make the best of it. Once > applied, FreeBSD will be compiled with SSP unless WITHOUT_SSP is set. > > This patch is a kind of proof of concept. For example, the FreeBSD > team might not want to enable SSP by default (any benchmark from other > users than me would be welcome). The Makefile guy(s?) may also have > comments on how I've implemented it in the build infrastructure > (SSP_CFLAGS notably). Also, the kernel bits I scrawled in > sys/kern/stack_protector.c should surely be improved. > > Best regards, > > [1] http://tataz.chchile.org/~tataz/FreeBSD/SSP/ Hi Jeremie. There is already WITHOUT_SSP option documented in src.conf in a BETA4 is this some kind of a stub? =2D-=20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 =2D Best regards, Nikolay Pavlov. <<<----------------------------------- = =20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D =20 --nextPart7267659.BUuPRfjGbe Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQBHX0+z/2R6KvEYGaIRAmniAKC9NI9Rv2ZEWY/4VKVZbXofbdKScACeMZSM 5wADfKRgHJJqnvFuYvbFpfg= =xTE5 -----END PGP SIGNATURE----- --nextPart7267659.BUuPRfjGbe--