Re: Glibc 2.12 issue

2010-09-01 Thread Michael Hope
On Thu, Sep 2, 2010 at 1:41 AM,  alexander.kanevs...@nokia.com wrote:
 On 01/09/2010 15:24, ext Loïc Minier loic.min...@linaro.org wrote:
 On Tue, Aug 31, 2010, Michael Hope wrote:
 The solution is to add -fno-stack-protector to the libgcc build
 options and rebuild the compiler.  I've heard (but can't track down
 the link) that the ARM libgcc unwind functions must be built this way
 in any case.

 See

 http://svn.debian.org/wsvn/gcccvs/branches/sid/gcc-4.5/debian/patches/gcc-def
 ault-ssp.diff
 for how Debian does this.

  How can we fix this in the upstream sources?  Should glibc or libgcc
  detect this erroneous state?
 Probably glibc, as this error appeared in 2.12, and not reproducible with
 the same gcc and flags with glibc 2.11.

There's a few questions here:

 1. What in libanl has caused the new call to gnu_Unwind_Backtrace?
Fixing this will remove the immediate problem
 2. Does the backtrace work with -fstack-protector?
 3. Should libgcc be built without -fstack-protector?

(3) is interesting as libgcc is such a fundamental library that it
really shouldn't have dependencies on anything else.

What's the opinion of people on the list?

-- Michael

___
linaro-toolchain mailing list
linaro-toolchain@lists.linaro.org
http://lists.linaro.org/mailman/listinfo/linaro-toolchain


Re: Glibc 2.12 issue

2010-09-01 Thread Michael Hope
I agree.  It's also inappropriate for something as low level as libgcc
to have dependencies on other libraries such as libssp.

We'll propose a patch adding '-fno-stack-protector' to the gcc list
and see how it goes.

-- Michael

On Thu, Sep 2, 2010 at 9:23 AM, Mark Mitchell m...@codesourcery.com wrote:
 On 9/1/2010 2:10 PM, Michael Hope wrote:

  3. Should libgcc be built without -fstack-protector?

 To put it more strongly, I believe that libgcc should not be built with
 -fstack-protector.

 I don't think there's any reason to expect that all code in libgcc would
 continue to work with stack-protection checks inserted (e.g., low-level
 primitives for thread safety or exception-handling, where chaos may
 ensue if a fault occurs in the midst of the stack-protection code).
 Furthermore, those checks will increase overhead for all users of the
 library.  And, if libgcc has dependencies on other shared libraries,
 that could potentially break binary compatibility across Linux
 distributions.

 If someone wants to build libgcc with -fstack-protector, that would
 require an assessment of all code in libgcc to make sure that is safe.
 libgcc is emphatically not application code.

 --
 Mark Mitchell
 CodeSourcery
 m...@codesourcery.com
 (650) 331-3385 x713

 ___
 linaro-toolchain mailing list
 linaro-toolchain@lists.linaro.org
 http://lists.linaro.org/mailman/listinfo/linaro-toolchain


___
linaro-toolchain mailing list
linaro-toolchain@lists.linaro.org
http://lists.linaro.org/mailman/listinfo/linaro-toolchain


Re: Glibc 2.12 issue

2010-09-01 Thread Michael Hope
Hi Chung-Lin.  Could you please take care of this upstream?  The short
story is that many distributions, including Fedora and Ubuntu, build
GCC with the stack protector turned on by default.  This is both
inappropriate for and could interfere with libgcc.  We'd like to
ensure the stack protector is turned off by adding
-fno-stack-protector to the libgcc build rules.

I've created LP: #628526 to track this.  See the link below for how
Ubuntu does it.  I'd like the change in Linaro GCC 4.4 and 4.5.

-- Michael

On Thu, Sep 2, 2010 at 9:53 AM, Michael Hope michael.h...@linaro.org wrote:
 I agree.  It's also inappropriate for something as low level as libgcc
 to have dependencies on other libraries such as libssp.

 We'll propose a patch adding '-fno-stack-protector' to the gcc list
 and see how it goes.

 -- Michael

 On Thu, Sep 2, 2010 at 9:23 AM, Mark Mitchell m...@codesourcery.com wrote:
 On 9/1/2010 2:10 PM, Michael Hope wrote:

  3. Should libgcc be built without -fstack-protector?

 To put it more strongly, I believe that libgcc should not be built with
 -fstack-protector.

 I don't think there's any reason to expect that all code in libgcc would
 continue to work with stack-protection checks inserted (e.g., low-level
 primitives for thread safety or exception-handling, where chaos may
 ensue if a fault occurs in the midst of the stack-protection code).
 Furthermore, those checks will increase overhead for all users of the
 library.  And, if libgcc has dependencies on other shared libraries,
 that could potentially break binary compatibility across Linux
 distributions.

 If someone wants to build libgcc with -fstack-protector, that would
 require an assessment of all code in libgcc to make sure that is safe.
 libgcc is emphatically not application code.

 --
 Mark Mitchell
 CodeSourcery
 m...@codesourcery.com
 (650) 331-3385 x713

 ___
 linaro-toolchain mailing list
 linaro-toolchain@lists.linaro.org
 http://lists.linaro.org/mailman/listinfo/linaro-toolchain



___
linaro-toolchain mailing list
linaro-toolchain@lists.linaro.org
http://lists.linaro.org/mailman/listinfo/linaro-toolchain