Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Tue, 18 Mar 2025 21:43:00 +0000
Message-Id: <D8JPX4S6FPXS.1JHNGLY840E49@posteo.net>
Subject: Re: stack smashing protection?
From: "Sertonix" <sertonix@posteo.net>
To: "Jim Pryor" <dubiousjim@gmail.com>,
 <~alpine/devel@lists.alpinelinux.org>
References: <30674376-d675-4c1d-96ef-7afb88a0dabb@app.fastmail.com>
In-Reply-To: <30674376-d675-4c1d-96ef-7afb88a0dabb@app.fastmail.com>

On Tue Mar 18, 2025 at 9:59 PM CET, Jim Pryor wrote:
> I'm building some binaries on an ARMv7 build of Alpine, and getting error=
s about the symbol `__stack_chk_fail` being missing.
>
> Adding `-fno-stack-protector` to my build command solves the issue.
>
> But I wonder if there's a way to get stack protection? I notice that when=
 I do `nm -D /usr/lib/libc.so | grep __stack_chk_fail` I get the output:
>
> ```
> 0003cc48 T __stack_chk_fail
> ```
>
> So the symbol is there, just not getting linked.
>
> I tried adding each of these to my build command, but none of them seemed=
 to fix the issue (that is, let me build without disabling stack protection=
):
>
> * -Wl,--whole-archive -lssp_nonshared -Wl,--no-whole-archive
> * -static-libgcc
> * -Wl,--as-needed -lc
>
> Is there something else I should be trying?

Do you have any small command that can reproduce the issue?

I tried gcc -o main main.c -fstack-protector-all with a simple test file
and it build fine.