From owner-freebsd-ports@FreeBSD.ORG Sat Sep 21 14:28:16 2013 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id A248689B for ; Sat, 21 Sep 2013 14:28:16 +0000 (UTC) (envelope-from bdrewery@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 7E3332185 for ; Sat, 21 Sep 2013 14:28:16 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.7/8.14.7) with ESMTP id r8LESG7C045811 for ; Sat, 21 Sep 2013 14:28:16 GMT (envelope-from bdrewery@freefall.freebsd.org) Received: (from bdrewery@localhost) by freefall.freebsd.org (8.14.7/8.14.7/Submit) id r8LESGeN045808 for freebsd-ports@freebsd.org; Sat, 21 Sep 2013 14:28:16 GMT (envelope-from bdrewery) Received: (qmail 64918 invoked from network); 21 Sep 2013 09:28:14 -0500 Received: from unknown (HELO ?10.10.0.24?) (freebsd@shatow.net@10.10.0.24) by sweb.xzibition.com with ESMTPA; 21 Sep 2013 09:28:14 -0500 Message-ID: <523DACF8.5040308@FreeBSD.org> Date: Sat, 21 Sep 2013 09:28:08 -0500 From: Bryan Drewery Organization: FreeBSD User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: Nathan Whitehorn Subject: Re: [CFT/HEADSUP] Ports now have Stack Protector support References: <523D792D.3060704@FreeBSD.org> <523DA68B.1020905@freebsd.org> <523DA8B1.8090303@FreeBSD.org> <523DAC7F.9080808@freebsd.org> In-Reply-To: <523DAC7F.9080808@freebsd.org> X-Enigmail-Version: 1.5.2 OpenPGP: id=3C9B0CF9; url=http://www.shatow.net/bryan/bryan.asc Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="4dQGeCiJPUjUnWoQPJGEAlLvJ34hDvJed" Cc: freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Sep 2013 14:28:16 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --4dQGeCiJPUjUnWoQPJGEAlLvJ34hDvJed Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On 9/21/2013 9:26 AM, Nathan Whitehorn wrote: > On 09/21/13 09:09, Bryan Drewery wrote: >> On 9/21/2013 9:00 AM, Nathan Whitehorn wrote: >>> On 09/21/13 05:47, Bryan Drewery wrote: >>>> Ports now support enabling Stack Protector [1] support on FreeBSD 10= >>>> i386 and amd64, and older releases on amd64 only currently. >>>> >>> Why only those architectures? >>> -Nathan >> I was only able to test on amd64 and i386. And that took 37 exp-runs >> over a month. >> >> See commit and CHANGES for more discussion on why not i386 on <10: >> >> http://svnweb.freebsd.org/ports?view=3Drevision&revision=3D327697 >> >=20 > OK. If I set this on powerpc anyway, will it turn on? I'm happy to > (slowly) test it there. > -Nathan You will need to modify Mk/bsd.ssp.mk to allow it. It would be great to get feedback on it! Like so: > .if defined(WITH_SSP) && !defined(WITHOUT_SSP) && !defined(SSP_UNSAFE)= && \ > - (${ARCH} =3D=3D i386 || ${ARCH} =3D=3D amd64) > + (${ARCH} =3D=3D i386 || ${ARCH} =3D=3D amd64 || ${ARCH} =3D=3D pow= erpc) > # Overridable as a user may want to use -fstack-protector-all --=20 Regards, Bryan Drewery --4dQGeCiJPUjUnWoQPJGEAlLvJ34hDvJed Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSPaz5AAoJEG54KsA8mwz5XYEP/2bE3ieh8yf4NweCJcSO5Nzn PSj9VUxPTBxbepuxQcoUt7XAQCHLo99r8F/2A0JEeRyw4k/nPxw0AuQ+fw80E4CI UXBhJ30Nn3IKuQCLDY/0hIiWD/NLKx5CGWOzf4s0rtf5C+Grm0tVVTrXQ3UPpdJk /SV09E89AkFRG3s6dmIQ4bEBxlVTc1t7IEfXGy5Y8b7ezMv0u5/KRxFlskhYXNV2 kxWdierbrTMd/SnEnIrOQ3lNRAYgYJDXvusV8BnJA2jgLD8pr6UtS/bCYkm8VYRd p4yFCCgLFJWE46sY1bVb+tJpHmfmp8B8n6tUPyGsMCtAocNZxOXXJLUsGpTrzRXb Pgi+/aWhRTHjLwncR9DQWmxO3OMuLzxczqUs7pLm/A703JXS/8rneoMIggdeJ976 fF6Z3RvFJBe8ZsMQx9DwwDOL+jkDdbXlV7EGN12p/DAtniKOC6l9qAzB2JWhHCV0 zNK2PNNGgRbIjNV5g8h2p7pIC5rv/qiCiO5ZGR6zdFoifYm40v3dgT3wB4bU+O05 /4xteve3Y7YHqSaCFxpBJE4zG33RQX3/m+evkDRZ7Ul2TRQX2iNjuTqRc80lLPl+ ZN0dIKYgVpTsAl6uErAI5VZRgi6wcf3NklQ91SFrXBspTRc9zOT0e63YXmBa+moa knu5HKjUhPx8VJa4baNX =mejg -----END PGP SIGNATURE----- --4dQGeCiJPUjUnWoQPJGEAlLvJ34hDvJed--