On Wed, Oct 06, 2021 at 09:20:42PM +0000, Hans-Christian Egtvedt (hegtvedt) wrote:

Hello,

latest stable release 4.4.286 does not build for me on ARM64 with CONFIG_CC_STACKPROTECTOR=y.

The offending commit

commit 69e450b170995e8a4e3eb94fb14c822553124870 Author: Dan Li ashimida@linux.alibaba.com Date: Tue Sep 14 11:44:02 2021

 arm64: Mark __stack_chk_guard as __ro_after_init

The 4.4.y kernel does not have the ro_after_init section defined at all, stable kernel 4.9.y is the first to have it.

I do not have an overview of this feature, but it appears to have started with commit

commit c74ba8b3480da6ddaea17df2263ec09b869ac496 Author: Kees Cook keescook@chromium.org Date: Wed Feb 17 23:41:15 2016

 arch: Introduce post-init read-only memory

-- Best regards, Hans-Christian Noren Egtvedt.

Thank you for letting me know. I'll go revert this and do a new release with this fixed.

greg k-h