From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on sa.local.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.7 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS autolearn=no autolearn_force=no version=3.4.1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:date:from:to:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to; bh=xujflpA8ciKCBejkCLgD4dRo34VojJBI8skIh+ItORE=; b=rDRx+XeTHDCyU5dBU9109Yy/3IBtLMzRc1MRNwfSK0xMcH+HPAoVeziKVHJ+uftdN+ wVy+dRHa6s8D7KKtMrYhLvEQ0FExOOliRGGbVCjTwxh5qq6I1uqyWkP/cW62qYmf6J0R lcVQCPfw5amTHB9TePp77k03ckSl2oCD4z81MiPuS4+XG4NWstXnCIpP/whW0MVqKM5R t2cVbF0EEhMYDPD5xNCSGV3Sp/OCQKnuxqHSU4Zro+APhoyVzrCigu1aCd266DPrcogg j2O0INp2jJGMrCo4bR2HpXwDe8r5f6n2a2bdqjqmVqBXhIOtcytIkZMCEucR9s2GtV5t AVPA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:date:from:to:subject:message-id :references:mime-version:content-disposition :content-transfer-encoding:in-reply-to; bh=xujflpA8ciKCBejkCLgD4dRo34VojJBI8skIh+ItORE=; b=SAQAjPT+FeqmQmdOBY8Lm66dAz8tIzvcwHvOwU0IkjE8cPc0cy6q9F0Q0XSufyzv6t xfXy203YN1fs2YBo8fwI3EXLrcMiV5d63tZehyezNXIPJ25WATYIPn19Bkbug7eTBm5E FsZRAxlHrbHSvFgX52Tq41Cv7l1BXg7m8u2JXcwi9m0iebjeMbz/SWaiTrYNUW6IM4zO dYYZmx1hGDtsMRx6ncPG2OxCZX8ydckV7hFtzaMeNM7LtjBTnRzSDPFtmZnMrgXrK32t zccljahPGU17bt+XsTjMC7ubvJ6xR9uES8mt99D/QIyDvMVCDceER4ZV1KjXzEXupsfo XeFg== X-Gm-Message-State: AOAM533me/PGA9VQUx4cC8JmwHh4CLHa64DQLDj0ckJrvmAADMXS2Vi4 qjAQOKMfQNerhB3axgECPxLVGNojxhE= X-Google-Smtp-Source: ABdhPJyDoqQcbsMRFlPRz4N2rWxpdTGQM9oTD7axUT892jwpjB/hhwbIb7P5Hlb7Y7HAR2GDzhQ7Og== X-Received: by 2002:a05:6512:3a87:: with SMTP id q7mr32215484lfu.612.1629875527933; Wed, 25 Aug 2021 00:12:07 -0700 (PDT) Sender: "Ivan A. Melnikov" Date: Wed, 25 Aug 2021 11:12:05 +0400 From: "Ivan A. Melnikov" To: ALT Linux Team development discussions Message-ID: <20210825071205.dhmo6dhcgxydbtmh@titan.localdomain> References: <20210824182050.GA5179@altlinux.org> <20210825052750.pcv2xtridwc3wgqq@titan.localdomain> <20210825084640.2412f2e2@homerun.localdomain> <20210825095329.334e1e5a1c578563a9435c6b@altlinux.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20210825095329.334e1e5a1c578563a9435c6b@altlinux.org> Subject: Re: [devel] I: LTO in %optflags by default X-BeenThere: devel@lists.altlinux.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ALT Linux Team development discussions List-Id: ALT Linux Team development discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Aug 2021 07:12:09 -0000 Archived-At: List-Archive: List-Post: On Wed, Aug 25, 2021 at 09:53:29AM +0300, Andrey Savchenko wrote: > On Wed, 25 Aug 2021 08:46:40 +0300 Denis Medvedev wrote: > > > -fstack-protector-all -Wstack-protector --param ssp-buffer-size=4 > > choice of "-fstack-protector" does not protect all functions . You need -fstack-protector-all to guarantee guards are applied to all functions, although this will likely incur a performance penalty. Consider -fstack-protector-strong as a middle ground. > > The -Wstack-protector flag here gives warnings for any functions that aren't going to get protected. > > > > -fstack-clash-protection > > Defeats a class of attacks called stack clashing. > > Эта может поломать много приложений и может быть значимый удар по > производительности. А разве -fstack-clash-protection уже не включен в нашем gcc10 по умолчанию? -- wbr, iv m.