Subject: Stack-protected gcc
To: None <tech-pkg@netbsd.org>
From: TAMURA Kent <kent@hauN.org>
List: tech-pkg
Date: 10/26/2001 19:22:41
The lang/gcc-ssp in pkgsrc is a gcc with stack-smashing
protection (ssp) extension [1], which protects against
buffer-overflow attacks.  Etoh-san in IBM Reseach developed the
ssp extension, and it is GPL, of course.

Etoh-san wants to know whether the ssp works on various
processors.  He has confirmed it works on Solaris/sparc,
AIX/powerpc, Linux/i386, and I have confirmed on NetBSD/i386 and
it does not worked on Linux/playstation2(mipsEEel) at this
moment.  If you have other architechtures, please build
lang/gcc-ssp and report to me or Etoh-san.

I have used a NetBSD/i386 kernel compiled with gcc-ssp for four
months with no problems.

[1] http://www.trl.ibm.com/projects/security/ssp/

-- 
TAMURA Kent <kent@hauN.org> <kent@netbsd.org>