[Buildroot] [PATCH v2 0/5] Hardening Wrapper Updates and Test

Matt Weber matthew.weber at rockwellcollins.com
Thu Aug 30 03:34:40 UTC 2018


This series looks to complete the implementation and migration of
hardening related options to the compiler and (new) linker wrapper.

The series provides runtime testing for RELRO/SSP/FORTIFY.

v1 -> v2
 - There were issues when I started regression testing where
   packages where providing multiple pie/pic/shared args on
   a single call of gcc/ld.

Signed-off-by: Matt Weber <matthew.weber at rockwellcollins.com>
CC: Jan Kundrát <jan.kundrat at cesnet.cz>
CC: Stefan Sørensen <stefan.sorensen at spectralink.com>

Matt Weber (5):
  toolchain/toolchain-wrapper: add link wrapper
  toolchain/toolchain-wrapper: add BR2_RELRO_FULL support
  toolchain/toolchain-wrapper: add BR2_SSP_* support
  toolchain/toolchain-wrapper: add BR2_FORTIFY_SOURCE_* support
  support/testing/tests/core: SSP & hardening flags

 .gitlab-ci.yml                                     |   6 +
 package/Makefile.in                                |  19 +-
 package/gcc/gcc.mk                                 |  12 +-
 support/testing/tests/core/test_hardening.py       | 110 +++++++++
 .../toolchain-external/pkg-toolchain-external.mk   |  12 +-
 toolchain/toolchain-wrapper-linker.c               | 273 +++++++++++++++++++++
 toolchain/toolchain-wrapper.c                      |  58 ++++-
 toolchain/toolchain-wrapper.mk                     |  24 ++
 8 files changed, 495 insertions(+), 19 deletions(-)
 create mode 100644 support/testing/tests/core/test_hardening.py
 create mode 100644 toolchain/toolchain-wrapper-linker.c

-- 
1.9.1



More information about the buildroot mailing list