Diff for /wikisrc/pkgsrc/hardening.mdwn between versions 1.2 and 1.3

version 1.2, 2016/03/17 03:05:59 version 1.3, 2016/03/17 03:14:51
Line 53  scenarios are essentially possible: Line 53  scenarios are essentially possible:
 * actual bug in the program crashing, exposed thanks to ASLR/mprotect;  * actual bug in the program crashing, exposed thanks to ASLR/mprotect;
 * bug in the implementation of ASLR/mprotect in the Operating System.  * bug in the implementation of ASLR/mprotect in the Operating System.
   
   ## Problems with `PKGSRC_USE_SSP`
   
   ### Packages failing to build
   
   The stack-smashing protection provided by this option does not work for some
   programs. The two most common situations in which this happens are:
   
   * the program makes use of the `alloca(3)` library call (memory allocator on the
     stack)
   * the program allocates variables on the stack, with the size determined at
     run-time.
   
   Both cases will require a modification to the program, or disabling this feature
   for part or all of the build.
   
   ### Run-time crashes
   
   Just like with `PKGSRC_MKPIE` above, this feature may cause some programs to
   crash, usually indicating an actual bug in the program. The fix will typically
   involve patching the original program.
   

Removed from v.1.2  
changed lines
  Added in v.1.3


CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb