Re: [gentoo-dev] Re: gcc 4.3.2 security updates
On Sunday 11 January 2009 08:23:14 Magnus Granberg wrote: > On Sunday 11 January 2009 09.39.08 Mike Frysinger wrote: > > On Saturday 10 January 2009 23:52:15 Magnus Granberg wrote: > > > On Sunday 11 January 2009 04.26.00 Mike Frysinger wrote: > > > > On Saturday 10 January 2009 19:03:17 Ryan Hill wrote: > > > > > On Sat, 10 Jan 2009 16:22:50 -0500 Mike Frysinger wrote: > > > > > > not to be out done, gcc-4.3.2-r3 will include changes like some > > > > > > other distros are now carrying: > > > > > > - the -Wformat-security flag is enabled by default > > > > > > - the -D_FORTIFY_SOURCE=2 flag is enabled by default > > > > > > > > > > > > if you dont want this stuff, you can use the flag > > > > > > -Wno-format-security and the flag -U_FORTIFY_SOURCE respectively > > > > > > > > > > I'm really hoping this isn't a stable candidate. :P > > > > > > > > gcc-4.3.2-r0 is still the stable candidate. nothing has changed. > > > > > > Any patches ready? > > > > patches for what ? > > For the FORTIFY and Wformat thing but i will see when it hit the tree. the patches are going into 4.3.2-r3. i'm testing them locally before i push out 4.3.2-r3. -mike signature.asc Description: This is a digitally signed message part.
Re: [gentoo-dev] Re: gcc 4.3.2 security updates
On Sunday 11 January 2009 09.39.08 Mike Frysinger wrote: > On Saturday 10 January 2009 23:52:15 Magnus Granberg wrote: > > On Sunday 11 January 2009 04.26.00 Mike Frysinger wrote: > > > On Saturday 10 January 2009 19:03:17 Ryan Hill wrote: > > > > On Sat, 10 Jan 2009 16:22:50 -0500 Mike Frysinger wrote: > > > > > not to be out done, gcc-4.3.2-r3 will include changes like some > > > > > other distros are now carrying: > > > > > - the -Wformat-security flag is enabled by default > > > > > - the -D_FORTIFY_SOURCE=2 flag is enabled by default > > > > > > > > > > if you dont want this stuff, you can use the flag > > > > > -Wno-format-security and the flag -U_FORTIFY_SOURCE respectively > > > > > > > > I'm really hoping this isn't a stable candidate. :P > > > > > > gcc-4.3.2-r0 is still the stable candidate. nothing has changed. > > > > Any patches ready? > > patches for what ? > -mike For the FORTIFY and Wformat thing but i will see when it hit the tree.
Re: [gentoo-dev] Re: gcc 4.3.2 security updates
On Saturday 10 January 2009 23:52:15 Magnus Granberg wrote: > On Sunday 11 January 2009 04.26.00 Mike Frysinger wrote: > > On Saturday 10 January 2009 19:03:17 Ryan Hill wrote: > > > On Sat, 10 Jan 2009 16:22:50 -0500 Mike Frysinger wrote: > > > > not to be out done, gcc-4.3.2-r3 will include changes like some other > > > > distros are now carrying: > > > > - the -Wformat-security flag is enabled by default > > > > - the -D_FORTIFY_SOURCE=2 flag is enabled by default > > > > > > > > if you dont want this stuff, you can use the flag > > > > -Wno-format-security and the flag -U_FORTIFY_SOURCE respectively > > > > > > I'm really hoping this isn't a stable candidate. :P > > > > gcc-4.3.2-r0 is still the stable candidate. nothing has changed. > > Any patches ready? patches for what ? -mike signature.asc Description: This is a digitally signed message part.
Re: [gentoo-dev] Re: gcc 4.3.2 security updates
On Sunday 11 January 2009 04.26.00 Mike Frysinger wrote: > On Saturday 10 January 2009 19:03:17 Ryan Hill wrote: > > On Sat, 10 Jan 2009 16:22:50 -0500 Mike Frysinger wrote: > > > not to be out done, gcc-4.3.2-r3 will include changes like some other > > > distros are now carrying: > > > - the -Wformat-security flag is enabled by default > > > - the -D_FORTIFY_SOURCE=2 flag is enabled by default > > > > > > if you dont want this stuff, you can use the flag > > > -Wno-format-security and the flag -U_FORTIFY_SOURCE respectively > > > > I'm really hoping this isn't a stable candidate. :P > > gcc-4.3.2-r0 is still the stable candidate. nothing has changed. > -mike Any patches ready? /Zorry
Re: [gentoo-dev] Re: gcc 4.3.2 security updates
On Saturday 10 January 2009 19:03:17 Ryan Hill wrote: > On Sat, 10 Jan 2009 16:22:50 -0500 Mike Frysinger wrote: > > not to be out done, gcc-4.3.2-r3 will include changes like some other > > distros are now carrying: > > - the -Wformat-security flag is enabled by default > > - the -D_FORTIFY_SOURCE=2 flag is enabled by default > > > > if you dont want this stuff, you can use the flag > > -Wno-format-security and the flag -U_FORTIFY_SOURCE respectively > > I'm really hoping this isn't a stable candidate. :P gcc-4.3.2-r0 is still the stable candidate. nothing has changed. -mike signature.asc Description: This is a digitally signed message part.
Re: [gentoo-dev] Re: gcc 4.3.2 security updates
On Sat, 10 Jan 2009 18:03:17 -0600 Ryan Hill wrote: > I'm really hoping this isn't a stable candidate. :P Is an earlier gcc 4.3 a stable candidate, or have those plans been abandoned? (I'm wondering whether it's worth the pain of dealing with 4.1's lack of tr1 regex support...) -- Ciaran McCreesh signature.asc Description: PGP signature
