From 5d6e7d3a6ae121b3beb65f8adb80e5716ad60b15 Mon Sep 17 00:00:00 2001 From: deraadt <> Date: Mon, 29 May 2017 09:44:01 +0000 Subject: Randomize link-order of libcrypto as we do with libc. This library has many small functions without significant local storage, therefore less tail protection from -fstack-protector-strong to prevent their use as ROP gadgets. It is used in security contexts. Also many functions dribble pointers onto the stack, allowing discovery of gadgets via the fixed relative addresses, so let's randomly bias those. ok tedu jsing The rc script will soon need a strategy for skipping this step on machines with poor IO performance. Or maybe do it less often? However, I don't see many more libraries we'll do this with, these are the two most important ones. --- src/lib/libcrypto/Makefile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/lib/libcrypto/Makefile b/src/lib/libcrypto/Makefile index 6454d6b109..4e9528a5d9 100644 --- a/src/lib/libcrypto/Makefile +++ b/src/lib/libcrypto/Makefile @@ -1,6 +1,7 @@ -# $OpenBSD: Makefile,v 1.17 2017/05/06 20:42:57 beck Exp $ +# $OpenBSD: Makefile,v 1.18 2017/05/29 09:44:01 deraadt Exp $ LIB= crypto +LIBREBUILD=y .include .ifndef NOMAN -- cgit v1.2.3-55-g6feb