mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-11-29 17:10:48 +00:00
3ba99f83a7
Enables previously manually disabled stackprotector and stackguard randomization. From https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511811: If glibc is built with the --enable-stackguard-randomization option, each application gets a random canary value (at runtime) from /dev/urandom. If --enable-stackguard-randomization is absent, applications get a static canary value of "0xff0a0000". This is very unfortunate, because the attacker may be able to bypass the stack protection mechanism, by placing those 4 bytes in the canary word, before the actual canary check is performed (for example in memcpy-based buffer overflows). |
||
---|---|---|
.. | ||
common.nix | ||
default.nix | ||
dont-use-system-ld-so-cache.patch | ||
dont-use-system-ld-so-preload.patch | ||
fix_path_attribute_in_getconf.patch | ||
glibc-crypt-blowfish.patch | ||
glibc-remove-datetime-from-nscd.patch | ||
info.nix | ||
locales-builder.sh | ||
locales.nix | ||
multi.nix | ||
nix-locale-archive.patch | ||
rpcgen-path.patch |