Changeset 706265a for general/prog

Timestamp:

09/10/2022 06:21:54 PM (22 months ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/soup3, xry111/xf86-video-removal

Children:

e51029f

Parents:

7b459c22 (diff), 08c7ccd (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.

Message:

Merge branch 'trunk' of git.linuxfromscratch.org:blfs into trunk

Location:

general/prog

Files:

• gcc.xml (modified) (3 diffs)
• llvm.xml (modified) (3 diffs)

general/prog/gcc.xml

@@ -199 +199 @@
     --disable-multilib                                 \
     --with-system-zlib                                 \
+    --enable-default-pie                               \
+    --enable-default-ssp                               \
     --enable-languages=c,c++,fortran,go,objc,obj-c++ &&
 make</userinput></screen>
@@ -207 +209 @@
       the <application>GCC</application> part of the testsuite will run more
       tests than in LFS. Some of those will report FAIL and others XPASS
-      (pass when expected to FAIL). As of gcc-12.1.0, about 90 FAIL occur
+      (pass when expected to FAIL). As of gcc-12.2.0, about 60 FAIL occur
       in the <quote>guality</quote> suite, as well as miscellaneous failures
-      throughout the rest of the test suite. If all the compilers above are
-      built, there will be around 100 unexpected failures out of over
-      523,000 tests. To run the tests, issue:
+      throughout the rest of the test suite, fifteen of which are already
+      present in the GCC tests of LFS. If all the compilers above are
+      built, there will be around 80 unexpected failures out of over
+      482,000 tests. To run the tests, issue:
     </para>
 
@@ -273 +276 @@
       <application>zlib</application> instead of the bundled one.
       <application>zlib</application> is used for compressing
-      and uncompressing <application>GCC</application>'s intermediate
+      and decompressing <application>GCC</application>'s intermediate
       language in LTO (Link Time Optimization) object files.
+    </para>
+
+    <para>
+      <parameter>--enable-default-pie</parameter>: Makes the
+      <option>-fpie</option> option the default when compiling programs.
+      Together with the <xref linkend="gASLR"/> feature enabled in the kernel,
+      this defeats some kind of attacks based on known memory layouts.
+    </para>
+
+    <para>
+      <parameter>--enable-default-ssp</parameter>: Makes the
+      <option>-fstack-protector-strong</option> option the default when
+      compiling programs. <xref linkend="gSSP"/> is a technique preventing
+      alteration of the program flow by corrupting the parameter stack.
     </para>
 

general/prog/llvm.xml

@@ -152 +152 @@
         <listitem>
           <para>
-            SSP patch:
+            Patch enabling <xref linkend="gSSP"/> by default in clang:
             <ulink url="&patch-root;/clang-&llvm-version;-enable_default_ssp-1.patch"/>
           </para>
@@ -236 +236 @@
      before applying -i -->
 <screen><userinput remap="pre">patch -Np2 -d projects/compiler-rt &lt;../compiler-rt-14.0.6-glibc_2_36-1.patch</userinput></screen>
+
+    <para>
+      If you have downloaded <application>clang</application>,
+      apply the following patch to enable <xref linkend="gSSP"/> by default
+      in compiled programs.
+    </para>
+<!-- need <../<patch> instead of -i because -d changes directory
+     before applying -i -->
 <screen><userinput remap="pre">patch -Np2 -d tools/clang &lt;../clang-&llvm-version;-enable_default_ssp-1.patch</userinput></screen>
 
@@ -391 +399 @@
       benchmarks. This option requires additional code that
       is not currently available.
+    </para>
+
+    <para>
+      <parameter>-DCLANG_DEFAULT_PIE_ON_LINUX=ON</parameter>: makes
+      <option>-fpie</option> option the default when compiling programs.
+      Together with the <xref linkend="gASLR"/> feature enabled in the kernel,
+      this defeats some kind of attacks based on known memory layouts.
     </para>