How to test for FORTIFY_SOURCE?

2020-03-17 Thread Jeffrey Walton
According to https://man.openbsd.org/NetBSD-8.1/security.7#FORTIFY_SOURCE OpenBSD implements glibc bounds checking on certain functions. I am trying to detect FORTIFY_SOURCE without looking up operating system names and versions. The following code works for Linux, but fails under OpenBSD (it is p

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Stuart Henderson
On 2020-03-18, Jeffrey Walton wrote: > According to https://man.openbsd.org/NetBSD-8.1/security.7#FORTIFY_SOURCE > OpenBSD implements glibc bounds checking on certain functions. I am > trying to detect FORTIFY_SOURCE without looking up operating system > names and versions. That is a NetBSD manua

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Jeffrey Walton
On Wed, Mar 18, 2020 at 4:26 AM Stuart Henderson wrote: > > On 2020-03-18, Jeffrey Walton wrote: > > According to https://man.openbsd.org/NetBSD-8.1/security.7#FORTIFY_SOURCE > > OpenBSD implements glibc bounds checking on certain functions. I am > > trying to detect FORTIFY_SOURCE without lookin

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Theo de Raadt
Jeffrey Walton wrote: > On Wed, Mar 18, 2020 at 4:26 AM Stuart Henderson wrote: > > > > On 2020-03-18, Jeffrey Walton wrote: > > > According to https://man.openbsd.org/NetBSD-8.1/security.7#FORTIFY_SOURCE > > > OpenBSD implements glibc bounds checking on certain functions. I am > > > trying to

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Martijn van Duren
On 3/18/20 3:59 PM, Jeffrey Walton wrote: > On Wed, Mar 18, 2020 at 4:26 AM Stuart Henderson wrote: >> >> On 2020-03-18, Jeffrey Walton wrote: >>> According to https://man.openbsd.org/NetBSD-8.1/security.7#FORTIFY_SOURCE >>> OpenBSD implements glibc bounds checking on certain functions. I am >>>

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Andreas Kusalananda Kähäri
On Wed, Mar 18, 2020 at 10:59:21AM -0400, Jeffrey Walton wrote: > On Wed, Mar 18, 2020 at 4:26 AM Stuart Henderson wrote: > > > > On 2020-03-18, Jeffrey Walton wrote: > > > According to https://man.openbsd.org/NetBSD-8.1/security.7#FORTIFY_SOURCE > > > OpenBSD implements glibc bounds checking on

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Jeffrey Walton
On Wed, Mar 18, 2020 at 11:25 AM Andreas Kusalananda Kähäri wrote: > > On Wed, Mar 18, 2020 at 10:59:21AM -0400, Jeffrey Walton wrote: > > On Wed, Mar 18, 2020 at 4:26 AM Stuart Henderson > > wrote: > > > > > > On 2020-03-18, Jeffrey Walton wrote: > > > > According to > > > > https://man.openb

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Stuart Henderson
On 2020/03/18 11:55, Jeffrey Walton wrote: > On Wed, Mar 18, 2020 at 11:25 AM Andreas Kusalananda Kähäri > wrote: > > > > On Wed, Mar 18, 2020 at 10:59:21AM -0400, Jeffrey Walton wrote: > > > On Wed, Mar 18, 2020 at 4:26 AM Stuart Henderson > > > wrote: > > > > > > > > On 2020-03-18, Jeffrey Wal

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Ingo Schwarze
Hi Theo, Theo de Raadt wrote on Wed, Mar 18, 2020 at 09:06:25AM -0600: > Jeffrey Walton wrote: >> What is the purpose of supplying man pages for the wrong operating >> system? The purpose is to make it simpler to compare how different systems work without having to jump back and forth among dif

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Ingo Schwarze
Hi Jeffrey, Jeffrey Walton wrote on Wed, Mar 18, 2020 at 11:55:53AM -0400: > I assumed OpenBSD and NetBSD were collaborating and shared code and > docs in some places. To a limited extent, that is true. For example, NetBSD includes mandoc(1) which is predominantly developed on OpenBSD while Ope

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Theo de Raadt
Ingo Schwarze wrote: > Hi Jeffrey, > > Jeffrey Walton wrote on Wed, Mar 18, 2020 at 11:55:53AM -0400: > > > I assumed OpenBSD and NetBSD were collaborating and shared code and > > docs in some places. > > To a limited extent, that is true. To a limited extent, it is true that birds and fish a

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Luke A. Call
On 03-18 19:22, Ingo Schwarze wrote: > > Ingo -- I think using man.openbsd.org as a "testbed for all possible > > man page hierarchies" incorrect. > > It was never a testbed, but a production service with several parts > provided nowhere else (well, at least until FreeBSD followed our > lead and s

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Ingo Schwarze
Hi, Theo de Raadt wrote on Wed, Mar 18, 2020 at 12:44:03PM -0600: > Ingo Schwarze wrote: >> Jeffrey Walton wrote on Wed, Mar 18, 2020 at 11:55:53AM -0400: >>> I assumed OpenBSD and NetBSD were collaborating and shared code >>> and docs in some places. >> To a limited extent, that is true. > To

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread Luke A. Call
On 03-18 20:29, Ingo Schwarze wrote: > I have definitely collaborated with at least these NetBSD developers > in the past: And a lame but sincere thanks to Ingo, Theo, and everyone else, for the impressive work freely given, and for patiently tolerating the rest of us.

Re: How to test for FORTIFY_SOURCE?

2020-03-18 Thread lists
Wed, 18 Mar 2020 11:55:53 -0400 Jeffrey Walton > On Wed, Mar 18, 2020 at 11:25 AM Andreas Kusalananda Kähäri > wrote: > > > > On Wed, Mar 18, 2020 at 10:59:21AM -0400, Jeffrey Walton wrote: > > > On Wed, Mar 18, 2020 at 4:26 AM Stuart Henderson > > > wrote: > > > > > > > > On 2020-03-18, Je

Re: How to test for FORTIFY_SOURCE?

2020-03-20 Thread Ingo Schwarze
Hi Luke, Luke A. Call wrote on Wed, Mar 18, 2020 at 12:54:10PM -0600: > On 03-18 19:22, Ingo Schwarze wrote: >> Theo de Raadt wrote: >>> Ingo -- I think using man.openbsd.org as a "testbed for all possible >>> man page hierarchies" incorrect. >> It was never a testbed, but a production service w