stack-smashing protector by default

Development on core packages and the distribution goes on in here.

stack-smashing protector by default

Postby xanb » Wed Apr 09, 2014 7:37 am

Hi,

Just a simple question: in the main archlinux all packages are compiled with stack-smashing protector by default https://bugs.archlinux.org/task/18864. Does it happen in archlinuxarm too?

In case of affirmative answer, in all repos? In [core]? In [extra]? In [community]? In [alarm]? In [aur] ?

Thanks,
xanb
 
Posts: 41
Joined: Sun Dec 08, 2013 9:39 pm

Re: stack-smashing protector by default

Postby moonman » Wed Apr 09, 2014 9:12 am

from /etc/makepkg.conf (armv5)
$this->bbcode_second_pass_code('', 'CFLAGS="-march=armv5te -O2 -pipe -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"
CXXFLAGS="-march=armv5te -O2 -pipe -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2"')

so all packages are compiled with these, with some exceptions (xbmc-rbp-git is compiled fortify_source=1 instead of 2 because it breaks with 2, possibly others)
Pogoplug V4 | GoFlex Home | Raspberry Pi 4 4GB | CuBox-i4 Pro | ClearFog | BeagleBone Black | Odroid U2 | Odroid C1 | Odroid XU4
-----------------------------------------------------------------------------------------------------------------------
[armv5] Updated U-Boot | [armv5] NAND Rescue System
moonman
Developer
 
Posts: 3387
Joined: Sat Jan 15, 2011 3:36 am

Re: stack-smashing protector by default

Postby xanb » Thu Apr 10, 2014 10:33 am

Thank you very much.

This does not cover [aur], isn't?
xanb
 
Posts: 41
Joined: Sun Dec 08, 2013 9:39 pm

Re: stack-smashing protector by default

Postby pepedog » Thu Apr 10, 2014 11:55 am

Covers everything made with makepkg, if flag not overridden in PKGBUILD.
pepedog
Developer
 
Posts: 2431
Joined: Mon Jun 07, 2010 3:30 pm
Location: London UK


Return to Arch Linux ARM

Who is online

Users browsing this forum: No registered users and 6 guests