[sudo-workers] Improve stack smashing protector check

Todd C. Miller Todd.Miller at courtesan.com
Fri Oct 30 07:22:33 MDT 2015


On Fri, 30 Oct 2015 11:01:11 -0000, Vicente Olivert Riera wrote:

> > I've just committed the following:
> >     http://www.sudo.ws/repos/sudo/rev/4ade5d1249f4
> 
> I have tested your patch and it doesn't work:
> 
> [snip]
> 
> checking whether C compiler accepts -fstack-protector-strong... yes
> checking whether the linker accepts -fstack-protector-strong... yes
> 
> [snip]
> 
> sudoreplay.o: In function `match_expr':
> sudoreplay.c:(.text+0x798): undefined reference to `__stack_chk_guard'
> sudoreplay.c:(.text+0x9f0): undefined reference to `__stack_chk_fail'
> 
> [snip]

I think you are testing without the patch, the output should look
like this:

checking for compiler stack protector support... -fstack-protector-strong

or:

checking for compiler stack protector support... no

 - todd


More information about the sudo-workers mailing list