Re: ProPolice/SSP in 7.0

Anders Hanssen <anders@rethink.no> writes:
> A look at the generated code confirms it does not use ssp for overrun()
>
> void
> overrun(const char *str)
> {
>     int x;
>     char a[4];
>     int y;
>
>     strcpy(a, str);
>     printf("hi");
> }
>
> # gcc -S -fstack-protector test.c

Use -fstack-protector-all instead.

> Anyway, I don't know why gcc fail to see that overrun() needs
> protection.

Because you didn't RTFM...

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"