Revision: 6722
          http://ipcop.svn.sourceforge.net/ipcop/?rev=6722&view=rev
Author:   gespinasse
Date:     2012-07-30 15:55:00 +0000 (Mon, 30 Jul 2012)
Log Message:
-----------
Parsing the log with something like
grep -rE 'gcc | cc ' log_i486 | grep -v ' -O' | grep -v checking >mylog

and discounting every link command, I find that mdmadm and beep have no 
optimization level set, so with 0, FORTIFY did not apply.

Unfortunately scanelf did not check for fortify yet but that could be done 
manually with 
readelf -sW <file> | grep -v '__stack_chk_fail' | grep '__.*_chk'

Modified Paths:
--------------
    ipcop/trunk/lfs/beep
    ipcop/trunk/lfs/mdadm
    ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0

Modified: ipcop/trunk/lfs/beep
===================================================================
--- ipcop/trunk/lfs/beep        2012-07-30 13:28:56 UTC (rev 6721)
+++ ipcop/trunk/lfs/beep        2012-07-30 15:55:00 UTC (rev 6722)
@@ -82,7 +82,8 @@
        @$(PREBUILD)
        @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
 
-       cd $(DIR_APP) && make
+       # FLAGS= is required to set the optimization level or -O0 is used and 
FORTIFY does not apply
+       cd $(DIR_APP) && make FLAGS="$(CFLAGS) -Wall"
        cd $(DIR_APP) && install -m 0755 beep /usr/bin
 
        @rm -rf $(DIR_APP)

Modified: ipcop/trunk/lfs/mdadm
===================================================================
--- ipcop/trunk/lfs/mdadm       2012-07-30 13:28:56 UTC (rev 6721)
+++ ipcop/trunk/lfs/mdadm       2012-07-30 15:55:00 UTC (rev 6722)
@@ -82,7 +82,8 @@
        @$(PREBUILD)
        @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
 
-       cd $(DIR_APP) && make -j $(PARALLELISM)
+       # CXFLAGS="$(CFLAGS)" is required to set the optimization level or -O0 
is used and FORTIFY does not apply
+       cd $(DIR_APP) && make -j $(PARALLELISM) CXFLAGS="$(CFLAGS)"
 
 ifeq "$(RUNNING_TEST)" "yes"
        # not yet ready : TODO we need a way to modprobe md_mod outside of our 
chroot (so in make.sh as root)

Modified: ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0
===================================================================
--- ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0      2012-07-30 13:28:56 UTC 
(rev 6721)
+++ ipcop/trunk/updates/2.1.0/ROOTFILES.i486-2.1.0      2012-07-30 15:55:00 UTC 
(rev 6722)
@@ -92,6 +92,9 @@
 /bin/sh
 /bin/bash
 ##
+## beeep recompiled with -Os and FORTIFY
+/usr/bin/beeep
+##
 ## bind-9.8.3-P2
 /usr/bin/dig
 /usr/bin/host

This was sent by the SourceForge.net collaborative development platform, the 
world's largest Open Source development site.


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Ipcop-svn mailing list
Ipcop-svn@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipcop-svn

Reply via email to