Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-14 Thread Andreas Cadhalpun
On 14.10.2016 18:28, Michael Niedermayer wrote: > On Thu, Oct 13, 2016 at 12:56:56AM +0200, Andreas Cadhalpun wrote: >> If you want both NX and ASLR security features for an executable it has >> to be built with '-pie' and must not contain text relocations. > > this should not be true > the differ

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-14 Thread Michael Niedermayer
On Fri, Oct 14, 2016 at 06:28:32PM +0200, Michael Niedermayer wrote: > On Thu, Oct 13, 2016 at 12:56:56AM +0200, Andreas Cadhalpun wrote: > > On 12.10.2016 23:44, Carl Eugen Hoyos wrote: > > > 2016-10-12 19:04 GMT+02:00 Andreas Cadhalpun > > > : > > >> On 04.10.2016 12:24, Carl Eugen Hoyos wrote:

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-14 Thread Michael Niedermayer
On Thu, Oct 13, 2016 at 12:56:56AM +0200, Andreas Cadhalpun wrote: > On 12.10.2016 23:44, Carl Eugen Hoyos wrote: > > 2016-10-12 19:04 GMT+02:00 Andreas Cadhalpun > > : > >> On 04.10.2016 12:24, Carl Eugen Hoyos wrote: > >>> Sorry if I miss something but with this patch, the hardening_check > >>>

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-14 Thread Andreas Cadhalpun
On 14.10.2016 15:02, Carl Eugen Hoyos wrote: > 2016-10-04 12:24 GMT+02:00 Carl Eugen Hoyos : > >> Sorry if I miss something but with this patch, the hardening_check >> script succeeds here both for x86_32 and x86_64 (static and shared). > > Tested successfully on x86_64 and x86_32 Linux (pie actu

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-14 Thread Carl Eugen Hoyos
2016-10-04 12:24 GMT+02:00 Carl Eugen Hoyos : > Sorry if I miss something but with this patch, the hardening_check > script succeeds here both for x86_32 and x86_64 (static and shared). Tested successfully on x86_64 and x86_32 Linux (pie actually works on my very old system). On Debian hppa, the

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-12 Thread Andreas Cadhalpun
On 12.10.2016 23:44, Carl Eugen Hoyos wrote: > 2016-10-12 19:04 GMT+02:00 Andreas Cadhalpun > : >> On 04.10.2016 12:24, Carl Eugen Hoyos wrote: >>> Sorry if I miss something but with this patch, the hardening_check >>> script succeeds here both for x86_32 and x86_64 (static and shared). >> >> This

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-12 Thread Carl Eugen Hoyos
2016-10-12 19:04 GMT+02:00 Andreas Cadhalpun : > On 04.10.2016 12:24, Carl Eugen Hoyos wrote: >> Sorry if I miss something but with this patch, the hardening_check >> script succeeds here both for x86_32 and x86_64 (static and shared). > > This script uses a very simplistic approach for testing pos

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-12 Thread Andreas Cadhalpun
On 04.10.2016 12:24, Carl Eugen Hoyos wrote: > Sorry if I miss something but with this patch, the hardening_check > script succeeds here both for x86_32 and x86_64 (static and shared). This script uses a very simplistic approach for testing position independent executables. I think it just does t

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-11 Thread Carl Eugen Hoyos
2016-10-05 15:14 GMT+02:00 Carl Eugen Hoyos : > Patch sent that fixes this issue. I'll apply both patches if there are no objections. Carl Eugen ___ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org http://ffmpeg.org/mailman/listinfo/ffmpeg-devel

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-05 Thread Carl Eugen Hoyos
2016-10-04 18:00 GMT+02:00 Michael Niedermayer : > On Tue, Oct 04, 2016 at 12:24:00PM +0200, Carl Eugen Hoyos wrote: >> >> Sorry if I miss something but with this patch, the hardening_check >> script succeeds here both for x86_32 and x86_64 (static and shared). > only case i found that breaks is w

Re: [FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-04 Thread Michael Niedermayer
On Tue, Oct 04, 2016 at 12:24:00PM +0200, Carl Eugen Hoyos wrote: > Hi! > > Sorry if I miss something but with this patch, the hardening_check > script succeeds here both for x86_32 and x86_64 (static and shared). > > Please comment, Carl Eugen only case i found that breaks is with --enable-lib

[FFmpeg-devel] [PATCH]configure: Enable pie for toolchain=hardened.

2016-10-04 Thread Carl Eugen Hoyos
Hi! Sorry if I miss something but with this patch, the hardening_check script succeeds here both for x86_32 and x86_64 (static and shared). Please comment, Carl Eugen From 3c5df95a022e9148f753dd2a850570080740c602 Mon Sep 17 00:00:00 2001 From: Carl Eugen Hoyos Date: Tue, 4 Oct 2016 12:21:41 +02