Import propolice (http://www.trl.ibm.com/projects/security/ssp), a stack

attack protection scheme, into gcc.

This protection is enabled by default. It can be turned off by using the
-fno-stack-protector flag.

Code by Hiroaki Etoh (etoh at jp dot ibm dot com); work on openbsd-specific
integration by fgsch@, deraadt@ and myself; tests by fgsch@, naddy@ and
myself; beer drinking by myself.

Please note that system upgrades with this new code will require a new
libc and ld.so to be build and installed before the propolice-enabled
compiler can be installed.

2 files changed, 4 insertions, 3 deletions

diff --git a/sys/arch/mvme68k/conf/Makefile.mvme68k b/sys/arch/mvme68k/conf/Makefile.mvme68k
index 0baa9ba4309..26dd4ab3205 100644
--- a/sys/arch/mvme68k/conf/Makefile.mvme68k
+++ b/sys/arch/mvme68k/conf/Makefile.mvme68k
@@ -1,4 +1,4 @@
-#	$OpenBSD: Makefile.mvme68k,v 1.17 2002/08/09 20:24:43 miod Exp $
+#	$OpenBSD: Makefile.mvme68k,v 1.18 2002/12/02 09:00:24 miod Exp $
 
 # This makefile is constructed from a machine description:
 #	config machineid
@@ -47,7 +47,7 @@ CMACHFLAGS=	-m68020
 .else
 CMACHFLAGS=	-m68060 -Wa,-m68030
 .endif
-CMACHFLAGS+=	-msoft-float
+CMACHFLAGS+=	-msoft-float -fno-stack-protector
 
 COPTS?=	-O2
 CFLAGS=		${DEBUG} ${COPTS} ${CWARNFLAGS} ${CMACHFLAGS} ${PIPE}
diff --git a/sys/arch/mvme68k/stand/Makefile.inc b/sys/arch/mvme68k/stand/Makefile.inc
index a3f02f3f7c9..e622ccccb11 100644
--- a/sys/arch/mvme68k/stand/Makefile.inc
+++ b/sys/arch/mvme68k/stand/Makefile.inc
@@ -1,3 +1,4 @@
-#	$OpenBSD: Makefile.inc,v 1.3 2000/03/03 00:54:52 todd Exp $
+#	$OpenBSD: Makefile.inc,v 1.4 2002/12/02 09:00:24 miod Exp $
 
 MDEC_DIR?=/usr/mdec
+CFLAGS+=	-fno-stack-protector