src/lib/libc/sys/stack_protector.c, branch main

Move the stack protector to a new "secure" directory

2015-08-14T03:03:13Z

As part of the code refactoring to support FORTIFY_SOURCE we want a new subdirectory "secure" to keep the files related to security. Move the stack protector functions to this new directory. No functional change. Differential Review: https://reviews.freebsd.org/D3333

NetBSD commit log:

2015-06-14T07:47:18Z

Use a constant array for the MIB. Newer LLVM decided that mib[] warranted stack protections, with the obvious crash after the setup was done. As a positive side effect, code size shrinks a bit. I'm not sure why this hasn't bitten us yes, but it is certainly possible and there are no real drawbacks to this change anyway. Submitted by: pfg Obtained from: NetBSD MFC after: 1 week

Revert r274772: it is not valid on MIPS

2014-11-25T03:50:31Z

Reported by: sbruno

Use canonical PIC flag

2014-11-21T02:05:48Z

It is automatically set when -fPIC is passed to the compiler. Reviewed by: dim, kib Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D1179

Clang related fixes:

2010-10-13T16:57:06Z

* When calling syslog(), pass a format string. * Define YY_NO_INPUT on nslexer.l Submitted by: Norberto Lopes

Remove extra FreeBSD tag.

2010-08-24T13:02:22Z

MFC after: 3 days

Move the __stack_chk_fail_local@FBSD_1.0 compat symbol definition into

2010-08-24T12:58:54Z

the separate .o for libc_pic.a. This prevents rtld from making the symbol global. Putting the stack_protector_compat.c into the public domain acknowledged by kan. Reviewed by: kan MFC after: 2 weeks

Use aux vector to get values for SSP canary, pagesize, pagesizes array,

2010-08-17T09:13:26Z

number of host CPUs and osreldate. This eliminates the last sysctl(2) calls from the dynamically linked image startup. No objections from: kan Tested by: marius (sparc64) MFC after: 1 month

Make libc.a provide __stack_chk_fail_local weak alias. This is

2009-09-17T13:21:53Z

needed to satisfy static libraries that are compiled with -fpic and linked into static binary afterwards. Several libraries in gcc are examples of such static libs.

Second attempt at eliminating .text relocations in shared libraries

2009-07-14T21:19:13Z

compiled with stack protector. Use libssp_nonshared library to pull __stack_chk_fail_local symbol into each library that needs it instead of pulling it from libc. GCC generates local calls to this function which result in absolute relocations put into position-independent code segment, making dynamic loader do extra work every time given shared library is being relocated and making affected text pages non-shareable. Reviewed by: kib Approved by: re (kib)