Re: [PATCH 1/2] BZ#10375: Configure magic to use -U_FORTIFY_SOURCE if needed.

[Mike Frysinger <vapier at gentoo dot org>]

On Monday 07 May 2012 22:45:16 Roland McGrath wrote:
> It is my considered professional opinion as an expert in the field
> that the hacking of the compiler to default to -D_FORTIFY_SOURCE
> and -fstack-protector is silly.

why ?  glibc isn't immune to string/memory bugs (which things like fortify 
catches), nor stack smashing (which ssp protects against).  iirc, it's 
possible to build glibc with ssp today as long as you make sure it's turned off 
for the ldso itself.  i'd have to check the patches we use in Gentoo though.
-mike

Attachment: signature.asc
Description: This is a digitally signed message part.