1.1 --- a/config/libc/glibc-eglibc.in-common	Mon Jan 31 19:52:18 2011 +0100
     1.2 +++ b/config/libc/glibc-eglibc.in-common	Mon Feb 21 23:39:46 2011 +0100
     1.3 @@ -58,6 +58,27 @@
     1.4        Seldom used, except for sparc64 which seems to need the flag -64
     1.5        to be passed onto gcc.
     1.6  
     1.7 +config LIBC_ENABLE_FORTIFIED_BUILD
     1.8 +    bool
     1.9 +    prompt "Enable fortified build (EXPERIMENTAL)"
    1.10 +    depends on EXPERIMENTAL
    1.11 +    default n
    1.12 +    help
    1.13 +      If you say 'y' here, then glibc will be using fortified versions
    1.14 +      of functions with format arguments (eg. vsyslog, printf...), and
    1.15 +      do a sanity check on the format at runtime, to avoid some of the
    1.16 +      common format string attacks.
    1.17 +      
    1.18 +      This is currently not supported, and will most probably result in
    1.19 +      a broken build, with an error message like:
    1.20 +        ../misc/syslog.c: In function '__vsyslog_chk':
    1.21 +        ../misc/syslog.c:123: sorry, unimplemented: inlining failed in
    1.22 +        call to 'syslog': function body not available
    1.23 +      
    1.24 +      If you are brave enough and want to debug the issue, then say 'y'
    1.25 +      here. Otherwise, be still and say 'n' (the default). ;-)
    1.26 +
    1.27 +
    1.28  config LIBC_DISABLE_VERSIONING
    1.29      bool
    1.30      prompt "Disable symbols versioning"