diff -r 165eff2a1e10 -r 8b9938edd3d8 config/libc/glibc-eglibc.in-common --- a/config/libc/glibc-eglibc.in-common Mon Jan 31 19:52:18 2011 +0100 +++ b/config/libc/glibc-eglibc.in-common Mon Feb 21 23:39:46 2011 +0100 @@ -58,6 +58,27 @@ Seldom used, except for sparc64 which seems to need the flag -64 to be passed onto gcc. +config LIBC_ENABLE_FORTIFIED_BUILD + bool + prompt "Enable fortified build (EXPERIMENTAL)" + depends on EXPERIMENTAL + default n + help + If you say 'y' here, then glibc will be using fortified versions + of functions with format arguments (eg. vsyslog, printf...), and + do a sanity check on the format at runtime, to avoid some of the + common format string attacks. + + This is currently not supported, and will most probably result in + a broken build, with an error message like: + ../misc/syslog.c: In function '__vsyslog_chk': + ../misc/syslog.c:123: sorry, unimplemented: inlining failed in + call to 'syslog': function body not available + + If you are brave enough and want to debug the issue, then say 'y' + here. Otherwise, be still and say 'n' (the default). ;-) + + config LIBC_DISABLE_VERSIONING bool prompt "Disable symbols versioning"