Re: Turning on stack protection by default

[Matthias Scheler <tron%zhadum.org.uk@localhost>]

On Sat, Oct 24, 2009 at 05:44:44PM +0300, Antti Kantee wrote:
> But to make up my mind, could you post some useful numbers on performance?
> I don't really care if a program written to be slow is slow (it's almost
> like you're arguing against your own proposal! ;).

No, I'm just providing a worst case example.

> What's the effect on something that people might actually care about,
> say build.sh ...

I could do that. But it would require downgrading all my systems
to binaries with SSP. Why don't you test it? You have a NetBSD system
without SSP. You can benchmark "build.sh" for producing safer
binaries and that repeat the build once you have updated. ;-)

> ... or apachebench?

What would that demonstrate except that the network is the bottleneck?

        Kind regards

-- 
Matthias Scheler                                  http://zhadum.org.uk/