From owner-freebsd-ports@FreeBSD.ORG Sat Sep 21 10:47:21 2013 Return-Path: Delivered-To: ports@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id B5801390 for ; Sat, 21 Sep 2013 10:47:21 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 8180227C2 for ; Sat, 21 Sep 2013 10:47:21 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id r8LAlLsA097767 for ; Sat, 21 Sep 2013 10:47:21 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id r8LAlL6w097762 for ports@FreeBSD.org; Sat, 21 Sep 2013 10:47:21 GMT (envelope-from bdrewery) Received: (qmail 783 invoked from network); 21 Sep 2013 05:47:19 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 21 Sep 2013 05:47:19 -0500 Message-ID: <523D792D.3060704@FreeBSD.org> Date: Sat, 21 Sep 2013 05:47:09 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: FreeBSD Ports Subject: [CFT/HEADSUP] Ports now have Stack Protector support X-Enigmail-Version: 1.5.2 OpenPGP: id=3C9B0CF9; url=http://www.shatow.net/bryan/bryan.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="9m4vlFrNggMFC76eK5IOlbi2OmNH4VxBP" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Sep 2013 10:47:21 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --9m4vlFrNggMFC76eK5IOlbi2OmNH4VxBP Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Ports now support enabling Stack Protector [1] support on FreeBSD 10 i386 and amd64, and older releases on amd64 only currently. Support may be added for earlier i386 releases once all ports properly respect LDFLAGS. To enable, just add WITH_SSP=3Dyes to your make.conf and rebuild all port= s. The default SSP_CLFAGS is -fstack-protector, but -fstack-protector-all may optionally be set instead. Please help test this on your system. We would like to eventually enable this by default, but need to identify any major ports that have run-time issues due to it. [1] https://en.wikipedia.org/wiki/Buffer_overflow_protection --=20 Regards, Bryan Drewery --9m4vlFrNggMFC76eK5IOlbi2OmNH4VxBP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSPXkxAAoJEG54KsA8mwz5H+AP/R6uZs156m7cqsA+QSm93CpT z1964dn1vii9Dv9QF+fh2LluYGtgSx/Aj7yeYekIINOf9AzsgKlpD6V8Q8J0cmVC GjmdwjaaqvmImKE4DIEGifGNBrlmSgbv3cNu8S3Lu8+ggSOl/dT6BYexXy5JU/F+ K48WuHFwt2fB1B5Dn2eSjQYDiUZZ7YCO/MTVLme6MnWhuGKP8BSGbn7qjtIUCqme vMGtvLwfXL+j0164ftdON6t0ddS9d/01jec2iSfglEqAm0FhCgv+A8pHmqtRnmKL j2+QwMLML6hPmXvJOCKR15XyfTkE5R1wRXU5TyspKH7u3AbdBKRY4KmcV+0GNgL4 SlNBSOZ53fHci2EXnxGJ6Fil3/g3JbxLEJEt+zPeMRe99mu/wRrahyxiIuwDOKch Im9mJcIu0zqnk0RbnW9lHtqWrYZO5PzcvKBg95HaaCW6s7nzTBBFPxkLCuoBOtoi 799PH/WmpmOMvQFzZg6+OEYZFTY6hrgI//DOwr6+866myci2/XAWx7E9zoj5MbPL dBvHw3IOrKxWRC9h1XHt+nlL8JZD+XhxJ1dgXPMRwRP7hUBaZM9LHlVwC5XZxA8/ BEiSQJKRVwjpY5jbFY/ncgNJ5/Bk2TXYTQIxQ6pZin07j4zS1XN09lpwXG75TonG mhvlmjikzkhLyfBuciTt =eCeq -----END PGP SIGNATURE----- --9m4vlFrNggMFC76eK5IOlbi2OmNH4VxBP--