[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#406753: closed by Matthias Klose <doko@cs.tu-berlin.de> (Re: Bug#406753: Ubuntu branding by default in Debian gcc manpage for -fstack-protector: please also add Debian default)



reopen 406753
thanks

On Tue, Jun 05, 2007 at 07:51:07AM +0000, Debian Bug Tracking System wrote:
>This is an automatic notification regarding your Bug report
>#406753: Ubuntu branding by default in Debian gcc manpage for -fstack-protector: please also add Debian default,
>which was filed against the gcc-4.1 package.
>
>It has been closed by Matthias Klose <doko@cs.tu-berlin.de>.
>
>Their explanation is attached below.  If this explanation is
>unsatisfactory and you have not received a better one in a separate
>message then please contact Matthias Klose <doko@cs.tu-berlin.de> by replying
>to this email.
>
>tags 406753 + wontfix
>thanks
>
>no, we don't document things, which are the default anyway, or else
>we would have to do that for every option.

You did document the default in Ubuntu, but in a Debian manpage. Yes,
you do not want to fix it; but no, this bug is still standing and
closing it is just denying the reality.

>> -fstack-protector
>> 
>> Emit extra code to check for buffer overflows, such as stack smashing
>> attacks.  This is done by adding a guard variable to functions with
>> vulnerable objects.  This includes functions that call alloca,
>> and functions with buffers larger than 8 bytes.  The guards are
>> initialized when a function is entered and then checked when the
>> function exits.  If a guard check fails, an error message is printed
>> and the program exits.  On Ubuntu the default is -fstack-protector,
>> to turn it off use -fno-stack-protector.
>> 
>> The last sentence might be replaced by:
>> 
>> On Debian the default is -fnostack-protector, to turn it on use
>> -fstack-protector which is the default on Ubuntu.

Cheers,
-- 
 .''`.   Aurélien GÉRÔME
: :'  :
`. `'`   Free Software Developer
  `-     Unix Sys & Net Admin

Attachment: signature.asc
Description: Digital signature


Reply to: