[PATCH 1/2] BZ#10375: Configure magic to use -U_FORTIFY_SOURCE if needed.

[Mike Frysinger]

On Monday 07 May 2012 22:45:16 Roland McGrath wrote:
> It is my considered professional opinion as an expert in the field
> that the hacking of the compiler to default to -D_FORTIFY_SOURCE
> and -fstack-protector is silly.

why ?  glibc isn't immune to string/memory bugs (which things like fortify 
catches), nor stack smashing (which ssp protects against).  iirc, it's 
possible to build glibc with ssp today as long as you make sure it's turned off 
for the ldso itself.  i'd have to check the patches we use in Gentoo though.
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20120508/b9f5ac9e/attachment.sig>