Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

Mark CC_STACKPROTECTOR as being BROKEN

It's always been broken, but recent fixes actually made it do something,
and now the brokenness shows up as the resulting kernel simply not
working at all.

So it used to be that you could enable this config option, and it just
didn't do anything. Now we'd better stop people from enabling it by
mistake, since it _does_ do something, but does it so badly as to be
unusable.

Code to actually make it work is pending, but incomplete and won't be
merged into 2.6.25 in any case.

Acked-by: Arjan van de Ven <arjan@infradead.org>
Acked-by: Sam Ravnborg <sam@ravnborg.org>
Cc: James Morris <jmorris@namei.org>
Cc: Ingo Molnar <mingo@elte.hu>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

+1 -1
+1 -1
arch/x86/Kconfig
··· 1054 1054 1055 1055 config CC_STACKPROTECTOR 1056 1056 bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)" 1057 - depends on X86_64 && EXPERIMENTAL 1057 + depends on X86_64 && EXPERIMENTAL && BROKEN 1058 1058 help 1059 1059 This option turns on the -fstack-protector GCC feature. This 1060 1060 feature puts, at the beginning of critical functions, a canary