linux-kernel - Re: [PATCH] tools lib symbol: Use -D_FORTIFY

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <3441159.KmgsX75shj@bagend>
Date: Mon, 01 Apr 2024 13:51:23 +0200
From: Diederik de Haas <didi.debian@...ow.org>
To: Ian Rogers <irogers@...gle.com>,
 Uwe Kleine-König <ukleinek@...ian.org>
Cc: Arnaldo Carvalho de Melo <acme@...hat.com>,
 Namhyung Kim <namhyung@...nel.org>, linux-kernel@...r.kernel.org
Subject:
 Re: [PATCH] tools lib symbol: Use -D_FORTIFY_SOURCE=2 for non-debug builds

On Sunday, 30 April 2023 11:11:26 CEST Uwe Kleine-König wrote:
> On 4/29/23 23:05, Ian Rogers wrote:
> > On Apr 24, 2023 at 3:28 AM Uwe Kleine-König <ukleinek@...ian.org> wrote:
> >> Commit 160be157eaba ("tool lib symbol: Add Makefile/Build") failed to
> >> define _FORTIFY_SOURCE to 2, probabaly this was cut&pasted from other
> >> Makefiles with the same problem.
> >> 
> >> Fixes: 160be157eaba ("tool lib symbol: Add Makefile/Build")
> >> Signed-off-by: Uwe Kleine-König <ukleinek@...ian.org>
> > 
> > Acked-by: Ian Rogers <irogers@...gle.com>
> 
> Thanks
> 
> > Same problem here I think:
> > https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/to
> > ols/lib/api/Makefile#n42
> Indeed, and similar patch here:
> 
> https://lore.kernel.org/all/20230424102049.58338-1-ukleinek@debian.org/

I noticed this (and the other linked) patch haven't been merged yet.
What's needed to move this forward?
Download attachment "signature.asc" of type "application/pgp-signature" (229 bytes)