git.schokokeks.org
Repositories
Help
Report an Issue
keks-overlay.git
Code
Commits
Branches
Tags
Suche
Strukturansicht:
4b85c67
Branches
Tags
master
keks-overlay.git
sys-libs
glibc
files
2.10
glibc-2.10-hardened-configure-picdefault.patch
glibc security fixes
Hanno Böck
commited
4b85c67
at 2010-10-26 21:29:15
glibc-2.10-hardened-configure-picdefault.patch
Blame
History
Raw
Prevent default-fPIE from confusing configure into thinking PIC code is default. This causes glibc to build both PIC and non-PIC code as normal, which on the hardened compiler generates PIC and PIE. Patch by Kevin F. Quinn <kevquinn@gentoo.org> Fixed for glibc 2.10 by Magnus Granberg <zorry@ume.nu> --- configure.in +++ configure.in @@ -2145,7 +2145,7 @@ # error PIC is default. #endif EOF -if eval "${CC-cc} -S conftest.c 2>&AS_MESSAGE_LOG_FD 1>&AS_MESSAGE_LOG_FD"; then +if eval "${CC-cc} -fno-PIE -S conftest.c 2>&AS_MESSAGE_LOG_FD 1>&AS_MESSAGE_LOG_FD"; then libc_cv_pic_default=no fi rm -f conftest.*]) --- configure +++ configure @@ -7698,7 +7698,7 @@ # error PIC is default. #endif EOF -if eval "${CC-cc} -S conftest.c 2>&5 1>&5"; then +if eval "${CC-cc} -fno-PIE -S conftest.c 2>&5 1>&5"; then libc_cv_pic_default=no fi rm -f conftest.*
