Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 13 Nov 2015 09:55:35 +0100
From: HacKurx <>
Subject: Re: Binary blobs

Le 2015-11-13 09:07, Daniel Micay a écrit :
>> all hardened options for GCC.
> Well, you probably can't get away with -fsanitize=undefined
> -fsanitize-undefined-trap-on-error yet (object-size and
> signed-integer-overflow checks specifically). I know what you mean
> though :).

Yes you are right, it is easy to have a warning but not a correction.

But with mprotect and:
CFLAGS="-fstack-protector --param=ssp-buffer-size=4 -Wformat 
-Wformat-security -Werror=format-security"

It's already better than the official release :D

Best regards,

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.