Date: Tue, 30 Apr 2013 21:51:19 +0200 (CEST) From: Gilles Espinasse <g.esp@...e.fr> To: owl-dev@...ts.openwall.com Subject: Re: PIE on x86_64 ----- Mail original ----- > De: "Vasily Kulikov" <segoon@...nwall.com> > À: owl-dev@...ts.openwall.com > Envoyé: Mardi 30 Avril 2013 19:36:58 > Objet: Re: [owl-dev] PIE on x86_64 > ... > > > > Unfortunately changing the compiler defaults can break things in > > subtle ways. The most common breakage I'm aware of from making pie the > > default occurs in packages with assembler source files that are > > written in non-pic-compatible ways. These will turn into TEXTRELs in > > the pie binary, which depending on the arch, may just result in heavy > > runtime bloat (e.g. on 32-bit x86) or produce an error at link time > > (e.g. on x86_64). I seem to recall a user running into this issue > > in OpenSSL... > > I've tried to enable PIE by default and disable it on -static, etc. > > The patch is based on this one: > > http://ftp.osuosl.org/pub/lfs/hlfs-packages/unstable/gcc-4.1.2-fpie-2.patch > I borrowed the patch from HLFS too, but that was against gcc-4.5.1 (and use that with gcc-4.4). You could find that at http://ipcop.svn.sourceforge.net/viewvc/ipcop/ipcop/trunk/src/patches/ Patches come from http://www.linuxfromscratch.org/patches/downloads/gcc/ Gentoo has a hardened gcc patchset for any versions: http://sources.gentoo.org/cgi-bin/viewvc.cgi/gentoo/src/patchsets/gcc/ ... > > Some binary files in $PATH still miss DYN Type, will fix this too. > On the files that my distrib ship, only ldconfig is not DYN. Gilles
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.