Enable gcc's -fstack-protector-all by default?

Rick Jones rick.jones2 at hp.com
Tue Nov 27 09:25:53 EST 2007


Darren Tucker wrote:
> Rick Jones wrote:
> [...]
> 
>> Just general conservativeness would seem to suggest that until a 
>> broader number of platforms can be covered, it might not be time to 
>> become the default.
> 
> 
> I should have said "enabled by default if the compiler supports it".  If 
> the compiler doesn't, configure continues to behave as before.

I inferred that.  I'm just thinking that if there isn't certainty of it 
being sufficiently neutral on a broad swath of platforms, even if the 
compiler supports it it might be best to leave things be for the moment.

rick jones
ever the paranoid luddite :)



More information about the openssh-unix-dev mailing list