[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#406753: marked as done (Ubuntu branding by default in Debian gcc manpage for -fstack-protector: please also add Debian default)

Your message dated Tue, 5 Jun 2007 09:47:43 +0200
with message-id <18021.5407.764914.660711@gargle.gargle.HOWL>
and subject line Bug#406753: Ubuntu branding by default in Debian gcc manpage for -fstack-protector: please also add Debian default
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
Package: gcc-4.1
Version: 4.1.1ds2-21
Severity: minor

Hi,

When reviewing Ubuntu patches for Debian system packages that I
co-maintain such as yaboot and mkvmlinuz, I had to check the status
of -fstack-protector in Debian into gcc-4.1 source package, because
the manpage is unclear about it.

It would be nice to notice explicitely that -fno-stack-protector is
the default on Debian. Thanks.

Cheers,
-- 
 .''`.   Aurélien GÉRÔME
: :'  :
`. `'`   Free Software Developer
  `-     Unix Sys & Net Admin

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message --- 
tags 406753 + wontfix
thanks

no, we don't document things, which are the default anyway, or else
we would have to do that for every option.

> Some precisions to make myself more clear...
> 
> -fstack-protector
> 
> Emit extra code to check for buffer overflows, such as stack smashing
> attacks.  This is done by adding a guard variable to functions with
> vulnerable objects.  This includes functions that call alloca,
> and functions with buffers larger than 8 bytes.  The guards are
> initialized when a function is entered and then checked when the
> function exits.  If a guard check fails, an error message is printed
> and the program exits.  On Ubuntu the default is -fstack-protector,
> to turn it off use -fno-stack-protector.
> 
> The last sentence might be replaced by:
> 
> On Debian the default is -fnostack-protector, to turn it on use
> -fstack-protector which is the default on Ubuntu.

--- End Message ---
Reply to: