Bug 5996 - Enable UCLIBC_BUILD_NOW by Default
Summary: Enable UCLIBC_BUILD_NOW by Default
Status: RESOLVED INVALID
Alias: None
Product: uClibc
Classification: Unclassified
Component: Other (show other bugs)
Version: 0.9.33.3
Hardware: PC Linux
: P5 normal
Target Milestone: ---
Assignee: unassigned
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-02-28 00:00 UTC by Jeffrey Walton
Modified: 2013-02-28 12:16 UTC (History)
1 user (show)

See Also:
Host:
Target:
Build:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jeffrey Walton 2013-02-28 00:00:54 UTC
This has security implications too. Surely Gingerbreak and its attack on the PLT has not been forgotten??? (The PLT was used as a jumping off point or trampoline).

The trade off (microsecond for the early bind) versus wiping out an entire class of vulnerabilities seems like a win.

  | This tells the linker to resolve all symbols when the library is        │  
  │ first loaded, rather than when each function is first called.  This     │  
  │ increases start-up latency by a few microseconds and may do             │  
  │ unnecessary work (resolving symbols that are never used), but the       │  
  │ realtime people like it for making microbenchmark timings slightly      │  
  │ more predictable and in some cases it can be slightly faster due to     │  
  │ CPU cache behavior (not having to fault the linker back in to do        │  
  │ lazy symbol resolution).
Comment 1 Bernhard Reutner-Fischer 2013-02-28 12:16:37 UTC
see 'make help' and 'make config', 'make menuconfig'