-fstack-protector not enabled by default on ARM

[Kees Cook]

Binary package hint: gcc-4.3

The stack protector should be enabled by default on ARM builds. AFAIK, the upstream bugs have been fixed for a while now.

$ make stack-protector-off
gcc -Wall -O2 -U_FORTIFY_SOURCE -o stack-protector-off stack-protector.c -fno-stack-protector
$ make stack-protector-on
gcc -Wall -O2 -U_FORTIFY_SOURCE -o stack-protector-on stack-protector.c -fstack-protector
$ make stack-protector-default
gcc -Wall -O2 -U_FORTIFY_SOURCE -o stack-protector-default stack-protector.c

$ ./stack-protector-off AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Hello! You typed: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Segmentation fault

$ ./stack-protector-on AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Hello! You typed: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
*** stack smashing detected ***: ./stack-protector-on terminated
Aborted

$ ./stack-protector-default AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Hello! You typed: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Segmentation fault

on ARM:
$ gcc -v -Wall -O2 -U_FORTIFY_SOURCE -o stack-protector-default stack-protector.c 2>&1 | grep cc1
 /usr/lib/gcc/arm-linux-gnueabi/4.3.3/cc1 -quiet -v -U_FORTIFY_SOURCE stack-protector.c -quiet -dumpbase stack-protector.c -march=armv5t -mtune=cortex-a8 -auxbase stack-protector -O2 -Wall -version -o /tmp/ccgrxcFU.s

on i386:
$ gcc -v -Wall -O2 -U_FORTIFY_SOURCE -o stack-protector-default stack-protector.c 2>&1 | grep cc1
 /usr/lib/gcc/i486-linux-gnu/4.3.3/cc1 -quiet -v -U_FORTIFY_SOURCE stack-protector.c -quiet -dumpbase stack-protector.c -mtune=generic -auxbase stack-protector -O2 -Wall -version -fstack-protector -o /tmp/ccWuIDMj.s

the former is lacking -fstack-protector

[Matthias Klose (doko)]

according to http://gcc.gnu.org/bugzilla/show_bug.cgi?id=35965, this is not fixed for the 4.3 branch.

[Matthias Klose (doko)]

... but in the gcc-4.3 package, still not enabled.

[Launchpad Janitor (janitor)]

This bug was fixed in the package gcc-4.4 - 4.4.0-8ubuntu2

---------------
gcc-4.4 (4.4.0-8ubuntu2) karmic; urgency=low

  * Update to SVN 20090622 from the gcc-4_4-branch (r148821).
    - Fix PR objc/28050 (LP: #362217).
  * Enable SSP on arm and armel, run the testsuite with -fstack-protector.
    LP: #375189.

 -- Matthias Klose <email address hidden> Tue, 23 Jun 2009 00:57:50 +0200

[Launchpad Janitor (janitor)]

This bug was fixed in the package gcc-4.3 - 4.3.3-12ubuntu2

---------------
gcc-4.3 (4.3.3-12ubuntu2) karmic; urgency=low

  * Update to SVN 20090625 from the gcc-4_3-branch.
    - Fixes PR middle-end/38751, PR c/32041, PR tree-optimization/36891,
      PR objc/28050 (LP: #362217), PR C++/36607, PR target/35318,
      PR target/39240, PR target/39013, PR c/39855, PR libgcj/38396.
  * Enable SSP on arm and armel. LP: #375189.

 -- Matthias Klose <email address hidden> Thu, 25 Jun 2009 15:51:07 +0200