On Thu, 22 Jan 2004, Robert Collins wrote: > Not that I've used :[. There was a linux distro with stack-protection in > gcc IIRC.
Found two.. Immunix with the StackGuard extension <url:http://www.immunix.com/> Gento with the Stack Smashing Protector (similar to StackGuard) <url:http://www.gentoo.org/> <url:http://www.research.ibm.com/trl/projects/security/ssp/> Currently setting up a Gentoo development environment to try out the ssp extension. > I asked a gcc hacker I know and was pointed at 'mudflap' as > 'promising'. Indeed, mudflap looks VERY interesting, but somewhat hard to find documentation on it seems. Finally I found some good documentation on the GCC Summit 2003 proceedings and from what it looks this is a GCC extension no C/C++ developer should be without. It seems the Fedora Core 2 will include a mudflap enabled GCC and there is already prebuild packages available. More information shortly (installed and Squid compile running..) > Possibly valgrind or another profiler could give you some detail too. have not suceeded in trapping the error with valgrind yet, but it may simply be a matter of time. I will defenitely try the ssp and mudflap approaches immediately (pending installation first..). Regards Henrik
