uClibc and SSP

[Peter Mazinger]

Hello,

please provide info which patches you applied to GCC and which version of uClibc you are testing and which arch is the tested one.
Minimal requirements:
1. GCC needs to be patched to not use TLS for the guard
2. GCC needs to be patched to recognize uClibc as a valid SSP supporting library
3. uClibc should be trunk (not nptl), haven´t checked lately if any stable version would behave properly
4. uClibc might need some patch for ssp[-local].c to use inlined syscalls where possible
5. binutils needs support for AS_NEEDED

Static compiles might fail, first check that dynamic ones work.
Check your final binaries, that they make use of ld-uClibc.so.0 (readelf -d <...> | grep DT_NEEDED.
Try to test binaries, that do not use threads, since those might produce unreliable results.

Peter
-------- Original-Nachricht --------
> Datum: Sun, 8 Nov 2009 13:25:47 +0300
> Von: Mwanguhya Daniel Murungi <dmurungi at dicts.mak.ac.ug>
> An: uclibc at uclibc.org
> Betreff: uClibc and SSP

> Hello,
> 
> Am building a system using HLFS (hardened Linux from scratch) and uClibc.
> I 
> would like to use uClibc's SSP feature but whenever I enable it, any
> program 
> compiled with -fstack-protector and -fstack-protector-all seg faults.
> 
> The seg faults do not occur when I disable uClibc's SSP and use libssp
> from 
> GCC. The reason I no longer want to link against libssp is because binary 
> size increases by about 8k. 
> 
> Patching GCC with the gcc-fstack-protector patch (from Robert Connolly) 
> doesnot help either. 
> 
> How do i get uClibc's SSP to work? Am using GCC 4.2.4 and uClibc 0.9.30.1
> 
> -- 
> Mwanguhya Daniel Murungi
> Makerere University [ DICTS ]
> P.O.Box 7062, Wandegeya
> Kampala
> Uganda
> 
> MYTH: Knowledge is power
> TRUTH: APPLIED Knowledge is power
> _______________________________________________
> uClibc mailing list
> uClibc at uclibc.org
> http://lists.busybox.net/mailman/listinfo/uclibc

-- 
Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 -
sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser