From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/6947 Path: news.gmane.org!not-for-mail From: =?UTF-8?Q?Daniel_Cegie=C5=82ka?= Newsgroups: gmane.linux.lib.musl.general Subject: Re: standalone fortify source implementation Date: Wed, 4 Feb 2015 17:21:21 +0100 Message-ID: References: <20150204160214.GA3717@cream.2f30.org> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 X-Trace: ger.gmane.org 1423066917 11525 80.91.229.3 (4 Feb 2015 16:21:57 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 4 Feb 2015 16:21:57 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-6960-gllmg-musl=m.gmane.org@lists.openwall.com Wed Feb 04 17:21:57 2015 Return-path: Envelope-to: gllmg-musl@m.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1YJ2iB-0002US-Pk for gllmg-musl@m.gmane.org; Wed, 04 Feb 2015 17:21:55 +0100 Original-Received: (qmail 32533 invoked by uid 550); 4 Feb 2015 16:21:54 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 32524 invoked from network); 4 Feb 2015 16:21:53 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=zZ9HOl2iAfU+/bwlzsRBahEPmuaAJn2mtDHVoiS9r4k=; b=EQRUsZ9TTgU0yIpmwfD/GQYf9LuFcx0mp8FA23H3BF1se1d8i4XmMWifTIA4vyBist CC30frRs0bOc1afzUA+nXXPs4Vppoqtfnvtdf/YOs7S9j7lrx6gZMcojXmU9sm1zN0k0 abG/+aFWzTpnlocFRcuWxK5ZbkPAd/dm9bo0gs5CKd3TWzPCRxSwBWP6g8x5RHByQaz1 /x2jeUF/ZaBii1JEWBr8aFKWV1+PDlDv3acs83ZEJm2RTR3XLxhXYikANrP9Cj/7ADml WpGYyPbE9G8K90XxoG4T+KH+KwSunjoot8EzhiFMpPNRtZyGH/yx0uPNCpilqMONqctp ga8Q== X-Received: by 10.60.56.41 with SMTP id x9mr19381910oep.40.1423066901437; Wed, 04 Feb 2015 08:21:41 -0800 (PST) In-Reply-To: <20150204160214.GA3717@cream.2f30.org> Xref: news.gmane.org gmane.linux.lib.musl.general:6947 Archived-At: 2015-02-04 17:02 GMT+01:00 Dimitris Papastamos : > Hi everyone, > > I have been working on a standalone fortify source implementation[0] that > uses GCC's #include_next to overlay over the system headers. The current > implementation has been tested against musl libc and OpenBSD's libc. > > This implementation only supports _FORTIFY_SOURCE=1. Level 2 is the same > as level 1. If this is to be used by default on a system it makes sense > to only catch cases where UB would be invoked (level 1) rather than trap > on suspicious but legal code (level 2). Rich is planning this type of functionality: http://www.openwall.com/lists/musl/2013/08/30/1 Isn't it better to establish a collaboration here? Daniel