[Bug 1317307] Re: Make -fstack-protector-strong the default in gcc 4.9

Steve Beattie sbeattie at ubuntu.com
Mon May 19 18:01:19 UTC 2014


For clarification purposes, I'm attaching interdiff output between the
updated version of the gcc-default-ssp.diff and the version in gcc
4.9.0-4ubuntu2 currently in utopic-proposed. The differences are
threefold:

  1) update the definition of the SSP_DEFAULT_SPEC macro to default to
-fstack-protector-strong, and to disable that definition additionally if
-fstack-protector is given on the command line.

  2) Adjust the invocation documentation to inform users that the
default is now -fstack-protector-strong by default.

  3) Adjust in the invocation documentation the location of the
description of the default minimum ssp-buffer-size to actually fall
under the section for 'ssp-buffer-size' as due to fuzzy patching, it was
getting applied incorrectly under the section on 'min-size-for-stack-
sharing'

(The reason we lowered the minimum buffer size in Ubuntu 10.10 that gcc
would consider for determining whether to apply stack protection to that
function or not was to get a few more functions covered by -fstack-
protector without going to -fstack-protector-all and paying the costs
thereof.)

** Patch added: "interdiff-update-ssp-default.diff"
   https://bugs.launchpad.net/ubuntu/+source/gcc-4.9/+bug/1317307/+attachment/4115554/+files/interdiff-update-ssp-default.diff

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to gcc-4.9 in Ubuntu.
https://bugs.launchpad.net/bugs/1317307

Title:
  Make -fstack-protector-strong the default in gcc 4.9

Status in “gcc-4.9” package in Ubuntu:
  In Progress

Bug description:
  In gcc 4.9, the new option -fstack-protector-strong is supported. The
  advantages of using this option over -fstack-protector and -fstacke-
  protector-all are covered in
  http://www.outflux.net/blog/archives/2014/01/27/fstack-protector-
  strong/.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gcc-4.9/+bug/1317307/+subscriptions



More information about the foundations-bugs mailing list