Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 679784 - sys-apps/findutils does not respect CFLAGS (stack-protection)
Summary: sys-apps/findutils does not respect CFLAGS (stack-protection)
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-03-08 16:03 UTC by Agostino Sarubbo
Modified: 2019-03-09 13:47 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2019-03-08 16:03:52 UTC 
This is an auto-filled bug because this package does not respect user's CFLAGS.

While SSP is really good for security purpose, I'd expect that with CFLAGS="-fno-stack-protector" the package should not have stack protection.
In this case the file /usr/bin/find (and maybe some other file from this package) has stack protection.
To check the SSP status you can use:
checksec --file /usr/bin/find  (from app-admin/checksec)
hardening-check /usr/bin/find  (from app-admin/hardening-check)
readelf -sW /usr/bin/find | grep "__stack_chk_fail"
Comment 1 Agostino Sarubbo gentoo-dev 2019-03-09 13:47:54 UTC 
I'm sorry for the bugspam but this bug comes from a false-positive, more info at https://bugs.gentoo.org/679788#c2