nihilist/VeraCrypt
1
0
Fork 0
mirror of https://github.com/veracrypt/VeraCrypt synced 2024-11-23 19:43:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

Linux: Add linker flag for GCC version below 6.0 to improve ASLR security

Browse Source 
Reported on https://sourceforge.net/p/veracrypt/discussion/technical/thread/90f967e642
reference: https://grsecurity.net/toolchain_necromancy_past_mistakes_haunting_aslr
script to check: https://github.com/opensrcsec/paxtest/blob/master/contrib/check_align.sh
This commit is contained in:
Mounir IDRASSI 2024-07-05 10:36:04 +02:00
parent d7e442258a
commit 1ba6865ea1
No known key found for this signature in database
GPG Key ID: FC1B00364B3FE937
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/Makefile
View File

@ -219,6 +219,12 @@ ifeq "$(shell uname -s)" "Linux"
CXXFLAGS += -std=gnu++14 CXXFLAGS += -std=gnu++14
endif endif
# Linked in GCC versions below 6 was setting large value for MAXPAGESIZE which is not good for ASLR security
# So, we need to manually add the linker flag "-z max-page-size=4096" to set the maximum page size to 4KB
# in order to improve ASLR security. Starting from GCC 6, the default value of MAXPAGESIZE is 4KB.
ifeq ($(shell expr $(GCC_VERSION) \< 600), 1)
LFLAGS += -Wl,-z,max-page-size=4096
endif
ifeq "$(SIMD_SUPPORTED)" "1" ifeq "$(SIMD_SUPPORTED)" "1"
CFLAGS += -msse2 CFLAGS += -msse2