[PATCH 1/2] powerpc: initial stack protector (-fstack-protector) support · Christophe Leroy <hidden> · 2018-09-17
[PATCH 2/2] powerpc/32: stack protector: change the canary value per task · Christophe Leroy <hidden> · 2018-09-17
Re: [PATCH 2/2] powerpc/32: stack protector: change the canary value per task · Segher Boessenkool <hidden> · 2018-09-17
Re: [PATCH 1/2] powerpc: initial stack protector (-fstack-protector) support · kbuild test robot <hidden> · 2018-09-17
Re: [PATCH 1/2] powerpc: initial stack protector (-fstack-protector) support · Segher Boessenkool <hidden> · 2018-09-17

Re: [PATCH 1/2] powerpc: initial stack protector (-fstack-protector) support

From: Segher Boessenkool <hidden>
Date: 2018-09-17 17:13:28
Also in: lkml

Hi!

On Mon, Sep 17, 2018 at 12:15:05PM +0000, Christophe Leroy wrote:

Now, GCC offers the possibility to manually set the
stack-protector mode (global or tls) regardless of libc support.

Yup :-)

This time, the patch selects HAVE_STACKPROTECTOR only if
-mstack-protector-guard=global is supported by GCC.

"global" is weaker than "tls" (it is easier to read the cookie in an
exploit).  It is better to use tls if you can.


Segher