diff options
| author | Mike Frysinger <vapier@gentoo.org> | 2015-10-19 13:07:28 -0400 |
|---|---|---|
| committer | Mike Frysinger <vapier@gentoo.org> | 2015-10-19 15:36:48 -0400 |
| commit | 6ab674ebff5e60c62b126d0ac2e774e581916afe (patch) | |
| tree | 72e72448b982e3715630f091e3be4612244f6589 /ChangeLog | |
| parent | cf6d542db3dfe26402b6adaa740a578b54767f65 (diff) | |
| download | glibc-6ab674ebff5e60c62b126d0ac2e774e581916afe.tar.gz glibc-6ab674ebff5e60c62b126d0ac2e774e581916afe.tar.xz glibc-6ab674ebff5e60c62b126d0ac2e774e581916afe.zip | |
use -fstack-protector-strong when available
With gcc-4.9, a new -fstack-protector-strong flag is available that is between -fstack-protector (pretty weak) and -fstack-protector-all (pretty strong) that provides good trade-offs between overhead but still providing good coverage. Update the places in glibc that use ssp to use this flag when it's available. This also kills off the indirection of hardcoding the flag name in the Makefiles and adding it based on a have-ssp boolean. Instead, the build always expands the $(stack-protector) variable to the best ssp setting. This makes the build logic a bit simpler and allows people to easily set to a diff flag like: make stack-protector=-fstack-protector-all
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog index 007f6c9d7e..cc2e93934b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,15 @@ +2015-10-19 Mike Frysinger <vapier@gentoo.org> + + * config.make.in (have-ssp): Delete. + (stack-protector): New variable. + * configure.ac: Delete libc_cv_ssp export. Add libc_cv_ssp_strong + cache test for -fstack-protector-strong. Export stack_protector to + the best ssp flag. + * configure: Regenerated. + * login/Makefile (pt_chown-cflags): Always add $(stack-protector). + * nscd/Makefile (CFLAGS-nscd): Likewise. + * resolv/Makefile (CFLAGS-libresolv): Likewise. + 2015-10-16 H.J. Lu <hongjiu.lu@intel.com> [BZ #19122] |