grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Discuss usability issues, general maintenance, and general support issues for a grsecurity-enabled system.

grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Postby simonbcn » Wed Aug 24, 2011 8:56 am

This problem already was solved in "grsecurity-2.2.2-2.6.39.4-201108211939.patch" but in the patch "grsecurity-2.2.2-3.0.3-201108232250" this change hasn't been replicated. More info in this thread.
simonbcn
 
Posts: 30
Joined: Mon Apr 18, 2011 7:23 am

Re: grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Postby spender » Wed Aug 24, 2011 11:00 am

I didn't change anything in the patch you said fixed your problem that would have actually fixed your reported problem. Furthermore, all the changes contained between the patch you had problems with and the one that "fixed" it are contained in the 3.0.3 patch. I believe you have a broken toolchain/build environment.

-Brad
spender
 
Posts: 2185
Joined: Wed Feb 20, 2002 8:00 pm

Re: grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Postby simonbcn » Wed Aug 24, 2011 2:36 pm

spender wrote:I didn't change anything in the patch you said fixed your problem that would have actually fixed your reported problem. Furthermore, all the changes contained between the patch you had problems with and the one that "fixed" it are contained in the 3.0.3 patch. I believe you have a broken toolchain/build environment.

It's very curious that my "broken toolchain/build environment" only fails when I compile the kernel with your patches... Without your patches it compiles well...

EDIT:
I was wrong: the error still occurs with last patch the kernel 2.6.39.4 and now in kernel 3.0.3.
simonbcn
 
Posts: 30
Joined: Mon Apr 18, 2011 7:23 am

Re: grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Postby PaX Team » Wed Aug 24, 2011 2:51 pm

simonbcn wrote:It's very curious that my "broken toolchain/build environment" only fails when I compile the kernel with your patches... Without your patches it compiles well...
thing is, you're the only one seeing this problem, so obviously there's something peculiar with your build environment. since we don't have access to it, only you can figure out what makes ssp enabled for your kernel compiles...
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm

Re: grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Postby simonbcn » Wed Aug 24, 2011 3:06 pm

PaX Team wrote:
simonbcn wrote:It's very curious that my "broken toolchain/build environment" only fails when I compile the kernel with your patches... Without your patches it compiles well...
thing is, you're the only one seeing this problem, so obviously there's something peculiar with your build environment. since we don't have access to it, only you can figure out what makes ssp enabled for your kernel compiles...

And why when I compile without your patch compilation doesn't fail?

Is this issue related with this? This problem occurs since you have added this requirement to the patch.

Now I have to install gcc-plugin-dev, libmpfr-dev and libmpc-dev to compile the kernel with grsec patch.

The only one: http://forums.grsecurity.net/viewtopic.php?f=3&t=1688?
simonbcn
 
Posts: 30
Joined: Mon Apr 18, 2011 7:23 am

Re: grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Postby simonbcn » Wed Aug 24, 2011 3:30 pm

Same error compiling in my PC with Ubuntu 11.04 64 bits.
simonbcn
 
Posts: 30
Joined: Mon Apr 18, 2011 7:23 am

Re: grsecurity-2.2.2-3.0.3-201108232250 and "stack_chk_fail"

Postby PaX Team » Wed Aug 24, 2011 5:42 pm

simonbcn wrote:And why when I compile without your patch compilation doesn't fail?
as i just learned from Kees Cook, ubuntu's gcc forcibly enables ssp so successful compilation under !CC_STACKPROTECTOR relies on the main Makefile disabling support for ssp explicitly. and which happens to be somewhat broken with the plugins as the cc-option target uses KBUILD_CFLAGS for no good reason i think. next patch will hopefully fix this, let me know if it doesn't.
PaX Team
 
Posts: 2310
Joined: Mon Mar 18, 2002 4:35 pm


Return to grsecurity support