Changeset b89180f

Timestamp:

09/10/2022 12:14:10 PM (20 months ago)

Author:

Pierre Labastie <pierre.labastie@…>

Branches:

11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/llvm18, xry111/soup3, xry111/xf86-video-removal

Children:

08c7ccd

Parents:

b84c401

Message:

Add --enable-default-pie/ssp to gcc

Also command explanations and test result comments

File:

• general/prog/gcc.xml (modified) (3 diffs)

general/prog/gcc.xml

@@ -199 +199 @@
     --disable-multilib                                 \
     --with-system-zlib                                 \
+    --enable-default-pie                               \
+    --enable-default-ssp                               \
     --enable-languages=c,c++,fortran,go,objc,obj-c++ &&
 make</userinput></screen>
@@ -207 +209 @@
       the <application>GCC</application> part of the testsuite will run more
       tests than in LFS. Some of those will report FAIL and others XPASS
-      (pass when expected to FAIL). As of gcc-12.1.0, about 90 FAIL occur
+      (pass when expected to FAIL). As of gcc-12.2.0, about 60 FAIL occur
       in the <quote>guality</quote> suite, as well as miscellaneous failures
-      throughout the rest of the test suite. If all the compilers above are
-      built, there will be around 100 unexpected failures out of over
-      523,000 tests. To run the tests, issue:
+      throughout the rest of the test suite, fifteen of which are already
+      present in the GCC tests of LFS. If all the compilers above are
+      built, there will be around 80 unexpected failures out of over
+      482,000 tests. To run the tests, issue:
     </para>
 
@@ -273 +276 @@
       <application>zlib</application> instead of the bundled one.
       <application>zlib</application> is used for compressing
-      and uncompressing <application>GCC</application>'s intermediate
+      and decompressing <application>GCC</application>'s intermediate
       language in LTO (Link Time Optimization) object files.
+    </para>
+
+    <para>
+      <parameter>--enable-default-pie</parameter>: Makes the
+      <option>-fpie</option> option the default when compiling programs.
+      Together with the <xref linkend="gASLR"/> feature enabled in the kernel,
+      this defeats some kind of attacks based on known memory layouts.
+    </para>
+
+    <para>
+      <parameter>--enable-default-ssp</parameter>: Makes the
+      <option>-fstack-protector-strong</option> option the default when
+      compiling programs. <xref linkend="gSSP"/> is a technique preventing
+      alteration of the program flow by corrupting the parameter stack.
     </para>