Re: [vpp-dev] overflow hardening for vpp

2018-05-30 Thread Jin Sheng (jisheng)
-dev@lists.fd.io On Behalf Of Jin Sheng (jisheng) Sent: Wednesday, May 30, 2018 12:11 PM To: vpp-dev@lists.fd.io Cc: Dave Wallace Subject: [vpp-dev] overflow hardening for vpp Hi, We noticed that PIE and immediate binding isn’t enabled for vpp: /usr/bin/vpp: Position Independent Executable: n

Re: [vpp-dev] overflow hardening for vpp

2018-05-30 Thread Dave Barach
Yup. Looks like -pie disappeared for no reason that I can remember. I’ll turn it back on. D. From: vpp-dev@lists.fd.io On Behalf Of Jin Sheng (jisheng) Sent: Wednesday, May 30, 2018 12:11 PM To: vpp-dev@lists.fd.io Cc: Dave Wallace Subject: [vpp-dev] overflow hardening for vpp Hi, We

[vpp-dev] overflow hardening for vpp

2018-05-30 Thread Jin Sheng (jisheng)
Hi, We noticed that PIE and immediate binding isn’t enabled for vpp: /usr/bin/vpp: Position Independent Executable: no, normal executable! Stack protected: yes Fortify Source functions: yes (some protected functions found) Read-only relocations: yes Immediate binding: no, not found! In the wiki