Change Details

For libssp.so, we can create a filter on libc and use that. For libssp_nonshared.a, we recompile stack protector bits from libc with -DIN_LIBSSP to provide only the two symbols we actually need to expose, based on `nm /usr/lib/libssp_nonshared.a`. I note that the GNU libssp_nonshared.a doesn't seem to actually include __stack_chk_fail, but since __stack_chk_fail_local is a weak ref to it I've included it anyways...

For libssp.so, rebuild stack_protector.c with FORTIFY_SOURCE stubs that just abort built into it. For libssp_nonshared.a, steal stack_protector_compat.c from ^/lib/libc/secure and massage it to maintain that __stack_chk_fail_local is a hidden symbol.

For libssp.so, we can create a filter on libc and use thatrebuild stack_protector.c with FORTIFY_SOURCE stubs that just abort built into it. For libssp_nonshared.a, we recompile stack protector bits from libc with -DIN_LIBSSP to provide only the two symbols we actually need to expose, based on `nm /usr/lib/libssp_nonshared.a`. I note that the GNU libssp_nonshared.a doesn't seem to actually include __stack_chk_fail, but since __stack_chk_fail_local is a weak ref to it I've included it anyways...steal stack_protector_compat.c from ^/lib/libc/secure and massage it to maintain that __stack_chk_fail_local is a hidden symbol.