torsdag 09 januari 2014 23.18.28 skrev  Ryan Hill:
> On Thu, 09 Jan 2014 21:58:46 +0100
> 
> Magnus Granberg <zorry@gentoo.org> wrote:
> > Some time ago we discussed that we should enable stack smashing
> > (-fstack-protector) by default.  So we opened a bug to track this [1].
> > The affected Gcc version will be 4.8.2 and newer. Only amd64, x86, mips,
> > ppc, ppc64 and arm will be affected by this change.
> > 
> > You can turn off ssp by using the nossp USE flag or by adding
> > -fno-stack-protector to the CFLAGS and/or CXXFLAGS. We are using the same
> > patch as Debian/Ubuntu but with some Gentoo fixes.
> > 
> > The patch will move the sed for the HARD_CFLAGS, ALLCFLAGS and
> > ALLCXXFLAGS from do_gcc_PIE_patches() to make_gcc_hard().  We will
> > make_gcc_hard() the default for all Gcc versions 4.8 and newer, and turn
> > it on or off with hardened_gcc_works() that will make some sanity checks.
> 
> I went ahead and spun a new patchset for the compiler-side stuff if anyone
> wants to start playing around.
> 
> - apply the eclass patch from bug #484714 (the one attached to Magnus' email
> wouldn't apply for me but maybe my mailer mangled it)
> - in gcc-4.8.2.ebuild do:
> 
> -PATCH_VER="1.3"
> +PATCH_VER="1.4-ssptest"
> 
> -PIE_VER="0.5.8"
> +PIE_VER="0.5.9-ssptest"
> 
> BTW Magnus, thanks for doing this.
Hi
Have patched toolchain.eclass with the patch and with your change.
Updated 4.8.2 updated with the needed changes and commit it.
The use hardened && gcc-specs-ssp && append-cflags $(test-flags-CC -fno-stack-
protector) in glibc's common.eblit is fixed to.
So default ssp is out in the tree :)
/Magnus