On Fri, 28 Dec 2007, Gunther Mayer wrote:
Btw, I second the motion of having SSP enabled by default in FreeBSD, other
OS's have been doing this for years at a negligible performance overhead.
Gunther
It's too late to make that sort of change for FreeBSD 7.0, but I think
that's a good goal for FreeBSD 8.0.
Here's what I think you could do:
1. Verify that enabling SSP works properly.
2. Convince Kris Kennaway to run his mysql benchmarks on a FreeBSD 8
system both with and without SSP to verify that there is no significant
slowdown.
3. Get it enabled on FreeBSD 8 by default.
4. Request that the change be made to FreeBSD 7.1 or 7.2 after it has
proven to not cause problems on FreeBSD 8.
Since the subject came up, I just tried using it, and it's not giving me
the results I expected. Take the following program:
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
void overrun(void);
int main(void)
{
overrun();
}
void overrun(void)
{
int x;
char a[4];
int y;
strcpy(a, "ABCDE");
printf("hi");
}
If I compile it like so:
cc -g -fstack-protector-all overrun.c
The overrun is detected and the program is aborted.
./a.out
Abort (core dumped)
But if I compile it like so:
cc -g -fstack-protector overrun.c
The overrun is not caught.
./a.out
hi>
Either I'm doing something wrong, or we have gcc misconfigured and it's
not detecting that strcpy is a function which needs to be watched
closedly.
Mike "Silby" Silbersack
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
