[BACK]Return to hardening.mdwn CVS log [TXT] [DIR] Up to [NetBSD Developer Wiki] / wikisrc / pkgsrc

Diff for /wikisrc/pkgsrc/hardening.mdwn between versions 1.39 and 1.40

version 1.39, 2019/01/06 14:58:39 version 1.40, 2019/01/06 15:24:42
Line 221  for part or all of the build. Line 221  for part or all of the build.
   
 ### Run-time crashes  ### Run-time crashes
   
 Again, this feature may cause some programs to crash, usually indicating an  Again, this feature may cause some programs to crash via a SIGABRT,
 actual bug in the program. Patching the original program is then required.  usually indicating an actual bug in the program.
   
   On NetBSD `LOG_CRIT` level `syslog()` messages are sent and - by
   default - appended to `/var/log/messages`, e.g.:
   
      Jan  6 15:42:51 <hostname> -: <hostname> <program> - - - buffer overflow detected; terminated
   
   (where `<hostname>` is the `hostname(1)` and `<program>` is the
   `basename(1)` of the program crashed).
   
   Patching the original program is then required.
   
   Rebuilding the package via:
   
       % env CFLAGS=-g INSTALL_UNSTRIPPED=yes make replace
   
   and inspecting the `backtrace` of the coredump via the debugger
   should point out the problematic call by inspecting the frame
   calling the `_chk()' (SSP) function.
   
 ### Performance impact  ### Performance impact
   
Removed from v.1.39  
changed lines
  Added in v.1.40

CVSweb for NetBSD wikisrc <wikimaster@NetBSD.org> software: FreeBSD-CVSweb