Re: [gentoo-hardened] GCC4 (again...)

[atoth@atoth.sote.hu]

The new implementation is better than the original by Hirohi, IMHO.

Regards:
Dw.
-- 
dr Tóth Attila, Radiológus, 06-20-825-8057, 06-30-5962-962
Attila Toth MD, Radiologist, +36-20-825-8057, +36-30-5962-962

On Pén, Június 26, 2009 03:43, Kerin Millar wrote:
> 2009/6/26 Ed W <lists@wildgooses.com>:
>
> [snip]
>
>> However, to be clear I think this achieves a PIE install with no SSP? 
>> Can
>> anyone confirm this is correct?
>
> That's correct.
>
>> Seems like SSP is desirable, but not really sure why it's not so
>> straightforward to turn on?
>
> The SSP implementation you are familiar with is largely the work of Dr
> Hiroaki Etoh of IBM, Japan. As I understand it, the patch simply isn't
> being maintained any more and, consequently, others (Red Hat?) have
> picked up the baton and produced an implementation that it somewhat
> different. By mere virtue of being different, there are unique
> issues/bugs to be resolved before it can be enabled by default in the
> gcc-4.x hardened specs without causing undue breakage and inducing
> headaches throughout the hardened populace.
>
> Cheers,
>
> --Kerin
>