Pro Police stack detector and GCC 4.1

[Bojan Smojver]

It appears that IBM's Pro Police stack detector was merged into GCC 4.1.
Once this version hits the shelves, are there any plans to compile FCx
binaries of the day with this protection enabled or will exec-shield
will be the only stack smashing protection for the foreseeable future.

Don't want to start a security flame war here, just being curious.

-- 
Bojan

[Arjan van de Ven]

On Wed, 2005-09-21 at 09:12 +1000, Bojan Smojver wrote:
>  It appears that IBM's Pro Police stack detector was merged into
> GCC 4.1. 
.. and jakub backported this to our gcc 4.0

>  Once this version hits the shelves, are there any plans to compile
> FCx
>  binaries of the day with this protection enabled  
this is already the case for rawhide for quite some time now.. your
question in that sense comes a bit late ;)

[Bojan Smojver]

On Tue, 2005-09-20 at 19:44 -0400, Arjan van de Ven wrote:

>  this is already the case for rawhide for quite some time now.. your
>  question in that sense comes a bit late ;) 
On this particular occasion I don't mind being late :-)

Seriously, thanks for the info. Looking forward to FC5...

-- 
Bojan

[Dawid Gajownik]

Dnia 09/21/2005 01:12 AM, Użytkownik Bojan Smojver napisał:
>  It appears that IBM's Pro Police stack detector was merged into
> GCC 4.1. 
To be fair, all credit should go to RedHat guys :) GCC provides 
reimplementation of IBM's Stack Smashing Protector done by Richard 
Henderson with lots of patches from Jakub Jelinek:
http://gcc.gnu.org/ml/gcc-patches/2005-05/msg01193.html
http://sources.redhat.com/ml/libc-hacker/2005-06/msg00009.html
http://gcc.gnu.org/ml/gcc-patches/2005-06/msg01867.html
http://gcc.gnu.org/ml/gcc-patches/2005-06/msg01868.html
http://gcc.gnu.org/ml/gcc-patches/2005-06/msg01874.html
http://gcc.gnu.org/ml/gcc-patches/2005-07/msg00256.html
http://gcc.gnu.org/ml/gcc-patches/2005-07/msg00066.html

-- 

   ^_*

[Ulrich Drepper]

Bojan Smojver wrote:
>  It appears that IBM's Pro Police stack detector was merged into
> GCC 4.1. 
No.  Functionality which provides at least the functionality the
propolice patch provided has been reimplemented by Richard Henderson and
added to gcc 4.1.  The IBM patch was problematic at best.  For the rest
refer to what Arjan said.

-- 
➧ Ulrich Drepper ➧ Red Hat, Inc. ➧ 444 Castro St ➧ Mountain View, CA ❖