Re: [OpenWrt-Devel] Missing 'noexecstack' in uClibc MIPS builds

2014-10-03 Thread Catalin Patulea
On Wed, Oct 1, 2014 at 6:42 PM, Andrew McDonnell b...@andrewmcdonnell.net wrote: It seems that OpenWRT sets the relevant flag to require uClibc to build with NOEXECSTACK set. This is good. (For one introduction to NOEXECSTACK, see http://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart )

Re: [OpenWrt-Devel] Missing 'noexecstack' in uClibc MIPS builds

2014-10-03 Thread Felix Fietkau
On 2014-10-03 19:14, Catalin Patulea wrote: On Wed, Oct 1, 2014 at 6:42 PM, Andrew McDonnell b...@andrewmcdonnell.net wrote: It seems that OpenWRT sets the relevant flag to require uClibc to build with NOEXECSTACK set. This is good. (For one introduction to NOEXECSTACK, see

Re: [OpenWrt-Devel] Missing 'noexecstack' in uClibc MIPS builds

2014-10-03 Thread Andrew McDonnell
True. Perhaps that makes it a moot issue for BB. But I dont think it would hurt to be ahead of the curve in this day and age... I am not the only one adding this latent protection to MIPS: https://webrtc-codereview.appspot.com/994006/ https://gcc.gnu.org/ml/gcc-patches/2014-09/msg02430.html