00:29.00 | *** join/#uclibc Dj_Andy (i=Dj_Andy@e180234238.adsl.alicedsl.de) |
00:29.47 | Dj_Andy | is here anybody on??? i need help :( |
00:32.21 | Dj_Andy | is here anybody on??? i need help :( |
00:58.17 | *** join/#uclibc wrobbie (n=rob@cm74.kappa84.maxonline.com.sg) |
01:59.37 | *** join/#uclibc Skapare (n=phil@sedna.ipal.net) |
02:15.23 | *** join/#uclibc kasc_ (n=kasc@dslb-084-060-107-123.pools.arcor-ip.net) |
03:17.11 | *** join/#uclibc flatronf701B (n=flatronf@202.75.186.154) |
06:06.31 | *** join/#uclibc blindvt__ (n=bf@M796P011.adsl.highway.telekom.at) |
06:54.08 | *** join/#uclibc blindvt` (n=blindvt`@chello213047219050.surfer.at) |
07:21.36 | *** join/#uclibc vrm (n=vrm@210.23.98-84.rev.gaoland.net) |
07:22.35 | vrm | hi |
08:53.23 | blindvt` | wget -s http://msn.com/index.py |
08:53.23 | blindvt` | Connecting to msn.com (207.68.172.246:80) |
08:53.23 | blindvt` | wget: bad header line: status_CODE: NotFound |
08:53.33 | blindvt` | M$ sucks |
09:11.28 | blindvt` | heh, that one is even better (throws a runtime-error): |
09:11.48 | blindvt` | www.msn.com and then get /index.py HTTP/1.0 |
09:12.48 | blindvt` | sounds like a nice opportunity to stress that machine a bit ;) |
10:41.07 | CIA-9 | 03vda * r18346 10busybox/networking/nc_bloaty.c: nc: code shrinkage, bugfixes. -50 bytes code size |
11:55.38 | CIA-9 | 03aldot * r18347 10buildroot/package/bash/bash.mk: - using target's LDFLAGS as LDFLAGS_FOR_BUILD is b0rked |
12:00.35 | *** join/#uclibc vrm (n=vrm@210.23.98-84.rev.gaoland.net) |
12:51.45 | CIA-9 | 03aldot * r18348 10buildroot/package/libelf/libelf.mk: - bump version. memmove works so let configure know about this fact |
14:06.53 | *** join/#uclibc blindvt_ (n=bf@62.47.144.144) |
14:09.53 | *** join/#uclibc dalias (i=dalias@brightrain.aerifal.cx) [NETSPLIT VICTIM] |
14:09.53 | *** join/#uclibc triel (i=triel@pandora.stupidisco.net) [NETSPLIT VICTIM] |
14:09.53 | *** join/#uclibc r0ute (n=r0ute@ina044000004.lancs.ac.uk) [NETSPLIT VICTIM] |
14:14.34 | *** join/#uclibc quitte (n=quitte@stgt-d9beaa25.pool.mediaWays.net) |
14:21.02 | CIA-9 | 03aldot * r18349 10buildroot/package/libelf/ (Config.in libelf.mk): (log message trimmed) |
14:21.02 | CIA-9 | - someone disabled shared lib support without fixing the libelf rule leading to |
14:21.02 | CIA-9 | <PROTECTED> |
14:21.50 | *** join/#uclibc wrobbie (n=rob@cm74.kappa84.maxonline.com.sg) |
14:24.24 | *** join/#uclibc blindvt_ (n=bf@M815P028.adsl.highway.telekom.at) |
15:01.34 | CIA-9 | 03aldot * r18350 10buildroot/package/openssl/openssl.mk: - hit awk on steroids with a clue bait |
15:05.06 | CIA-9 | 03aldot * r18351 10buildroot/package/ltrace/Config.in: - doesn't compile if LFS is off |
16:31.07 | *** join/#uclibc mjn3-work (n=mjn3@h-66-134-116-110.dnvtco56.covad.net) |
16:32.06 | CIA-9 | 03aldot * r18352 10buildroot/package/readline/readline.mk: - commentary typo fix |
16:36.49 | CIA-9 | 03aldot * r18353 10buildroot/ (10 files in 9 dirs): - make sure to download fakeroot if needed |
18:01.49 | *** join/#uclibc KhemHome (i=KhemHome@nat/montavista/x-2750dafa0a4f824f) |
22:06.54 | *** join/#uclibc flyback (n=sankyo@c-67-186-27-63.hsd1.pa.comcast.net) |
22:07.04 | flyback | canucks! |
22:07.04 | flyback | :P |
22:07.08 | flyback | no seriously |
22:07.26 | flyback | is there any secvurity trade offs with uclibc vs glibc |
22:07.32 | flyback | on a platform with a mmu |
22:08.01 | solar | there are no known security problems with uClibc. |
22:08.26 | solar | now as far as proactive security measures some arches have more advantages than others |
22:08.34 | flyback | I know that much |
22:08.44 | flyback | oh hey you are the dude that did that exec patch yrs ago right? |
22:08.44 | solar | ppc for example recently got (thanks to Jocke) the addition of SecurePLT |
22:09.04 | solar | which properly splits up the PT_LOAD segments |
22:09.22 | solar | sparc,alpha still suffer from the problem (but we don't care about those arches) |
22:09.48 | solar | I think you are thinking of Solar Designer from the OWL project |
22:10.44 | flyback | oh |
22:10.47 | flyback | then you suck then |
22:10.47 | flyback | die |
22:10.50 | flyback | j/k |
22:10.51 | flyback | :P |
22:10.54 | flyback | thx for the info |
22:10.58 | flyback | neat |
22:11.07 | flyback | I was thinking about using this mostly x86 |
22:11.13 | flyback | for a bunch of old pc's I have lying around |
22:11.46 | solar | well the best security wise you can do is opt to use a hardened-uclibc-x86 toolchain |
22:12.03 | flyback | but I do have some juiceboxes (arm no mmu), a webpal (arm mmu), and palm t5, 2 old palm (m68k no mmu), and a ppc 405gp I will be messing with in the future |
22:12.14 | flyback | the sparctation 2 is going in the trash unless someone needs a board |
22:12.17 | flyback | worthless |
22:12.22 | flyback | pc beats it in every respect |
22:12.42 | flyback | it's almost as worthless as my ibm pcjr |
22:12.52 | flyback | thx |
22:13.08 | flyback | I just wondered if in general if security measures had to be sacrified to get the size down |
22:13.09 | flyback | overall |
22:13.21 | solar | http://tinderbox.dev.gentoo.org/uclibc/i386/ (prebuilt uclibc stable security based bins) |
22:13.29 | flyback | neato thx |
22:14.25 | flyback | vmware makes this more possible too :) |
22:14.36 | flyback | when I don't have time to setup a lot of native linux boxes |
22:14.40 | flyback | or extra ones for cross compiling |
22:14.41 | flyback | :) |
22:17.27 | flyback | yeah this virtual pc and vmware stuff has completely changed my world |
22:17.40 | flyback | I can test pretty much anything I want in minutes instead of hrs |
22:27.34 | ashes | Core was generated by `./a.out'. |
22:27.34 | ashes | Program terminated with signal 11, Segmentation fault. |
22:27.34 | ashes | #0 0x080483dd in __stack_chk_fail () at libc/sysdeps/linux/common/ssp.c:107 |
22:27.34 | ashes | 107 { |
22:28.32 | ashes | when i build a main(){} with a i686-pc-linux-uclibc-gcc and -fstack-protector-all, it segfaults |
22:29.05 | *** join/#uclibc blindvt_ (n=bf@M874P014.adsl.highway.telekom.at) |
22:29.09 | ashes | when i build a main(){} with a i686-pc-linux-gnu-gcc and -fstack-protector-all, linked to libuClibc.so, it does an infinite "stack smashing detected" loop |
22:29.37 | ashes | if i build with i686-pc-linux-uclibc-gcc and -fstack-protector (without the -all), then its fine |
22:30.27 | ashes | ssp.c:107 is actually ssp.c:99, i messed with it a bit so the line numbers are off |
22:32.39 | ashes | if i remove the "while(1)" from __stack_chk_fail, then the ssp-test.c built with i686-pc-linux-gnu-gcc does not do an infinite loop, and aborts properly. but removing the while(1) causes a compiler warning that a noreturn function has a return |
22:33.22 | ashes | removing the while(1) will still cause segfaults with i686-pc-linux-uclibc-gcc's a.out's |
22:35.50 | ashes | a.out = main(){} |
22:42.14 | solar | ssp + gcc-4.x = blah; |
22:42.32 | solar | so many patches to have clean upgrade paths. it sickens us. |
22:42.39 | solar | psm has it all working quite nice however |
22:43.38 | flyback | <PROTECTED> |
22:54.17 | flyback | I bet uclibc would be nice for that 486-100 I have with 8 meg of ram |
22:54.18 | flyback | hmm |