bug#27429: Stack clash (CVE-2017-1000366 etc); -fstack-check

2017-06-25 Thread Leo Famulari
I agree, let's wait for guidance from the upstream GCC and GLIBC developers. Original Message From: Marius Bakke <mba...@fastmail.com> Sent: June 25, 2017 6:41:06 AM EDT To: Danny Milosavljevic <dan...@scratchpost.org>, 27...@debbugs.gnu.org Subject: bug#27429: Stac

bug#27429: Stack clash (CVE-2017-1000366 etc); -fstack-check

2017-06-25 Thread Marius Bakke
Danny Milosavljevic writes: > Hi, > > what do you all think of rebuilding the world with "-fstack-check" (either > now or later on) ? > > That would make gcc emit code to always grow the stack in a way that it > certainly touches each 4 KiB (parametrizable by >

bug#27429: Stack clash (CVE-2017-1000366 etc); -fstack-check

2017-06-25 Thread Danny Milosavljevic
Hi, what do you all think of rebuilding the world with "-fstack-check" (either now or later on) ? That would make gcc emit code to always grow the stack in a way that it certainly touches each 4 KiB (parametrizable by STACK_CHECK_PROBE_INTERVAL_EXP) page on the way. I think that would be the