On Tue, Sep 04, 2007, Kurt Roeckx wrote:

> On Tue, Sep 04, 2007 at 05:22:43PM +0200, Stephen Henson via RT wrote:
> > An alternative technique is mentioned in:
> > 
> > http://marc.info/?l=openssl-dev&m=118001266831974&w=2
> 
> There patch from that thread is at:
> http://marc.info/?l=openssl-dev&m=117983173402236&w=2
> 
> There is also:
> http://marc.info/?l=openssl-dev&m=116300855616964&w=2
> 
> I applied the patch from the one you mention, but it still gave such
> warnings.  During building it still gave warnings in ocsp_ext.c.  I've
> posted a patch for that at:
> http://bugs.debian.org/429740#58
> 
> I didn't a patch for safestack.h yet, because I don't get any warnings
> that there is a problem with it.
> 
> 

You need to compile OpenSSL with -DDEBUG_SAFESTACK to enable that.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to