13:21 Baptiste Daroussin (bapt) 

framework: generalize WITH_ code

Make the definition of WITH_ variable (end user actionable) a define
via a generic code
Move the WITH_DEBUG code into its own file Features/debug.mk
Replace USE_LTO into WITH_LTO and move it into Features/lto.mk
Move WITH_SSP into its own Features/ssp.mk

Add a variable to defined which one are activated by default (here SSP)

Reviewed by:	portmgr (tcberner)
Differential Revision:	https://reviews.freebsd.org/D35873

    b26839a

14:27 Mathieu Arnold (mat) 

framework: Remove $FreeBSD$

Where appropriate fiddle with a few other things.

    5d33e04

01:11 jhb 

Use ARCH instead of MACHINE to check for mips.

Cross-building ports via CROSS_TOOLCHAIN and CROSS_SYSROOT only set
ARCH to the target arch.  MACHINE still references the host.  This
unbreaks cross-building ports for mips.

Reviewed by:	jbeich, portmgr (bapt)
Differential Revision:	https://reviews.freebsd.org/D22592

 

19:15 jbeich 

Switch to -fstack-protector-strong and enable on more architectures

PR:		237273
Exp-run by:	antoine
Approved by:	portmgr (antoine)
Differential Revision:	https://reviews.freebsd.org/D19907

 

07:24 rene 

Remove support for FreeBSD < 10.3 from Mk/*

This does not yet convert the files to bmake.

Reviewed by:	mat
Differential Revision:	https://reviews.freebsd.org/D9016

 

20:01 bdrewery 

- Enable SSP by default.

  This is the culmination of years of work and testing including work by jlh@.

  This will enable SSP by default for all amd64 releases, and i386 releases
  10.0 and over.

With hat:	portmgr
Tested by:	multiple exp-runs, CFT package repository, CFT ports
Discussed with:	bapt, antoine

 

21:18 bdrewery 

No need to expand CFLAGS/LDFLAGS here.

With hat:	portmgr

 

00:26 bdrewery 

- Rename public name of SSP support to WITH_SSP_PORTS as /usr/src
  has issues with 'installworld' when WITH_SSP is defined. [1]
  Keep WITH_SSP support for now since it has been announced as that
  already.
- Remove redundant wording in UPDATING [2]

Suggested by:	bapt [1]
Reported by:	blakkheim on EFNet
With hat:	portmgr

 

12:54 bdrewery 

SSP support has been added to ports with WITH_SSP for i386 and amd64
on FreeBSD 10, and amd64 on earlier versions.

SSP_UNSAFE is added to disable in a port if it fails to build, but
this should only be used in rare circumstances such as kernel modules.
Otherwise, the port may just be failing due to lack of respecting
LDFLAGS.

On FreeBSD 10, this uses an ldscript in /usr/lib/libc.so to pull in
libssp_nonshared.a to address issues linking on i386 [1].

On earlier FreeBSD versions the WITH_SSP knob will add -lssp_nonshared
to LDFLAGS on i386. This is not needed on amd64. However, several hundred
ports do not currently respect LDFLAGS, so this support is disabled currently
as it causes build failures if a dependency is looking for the stack_chk

(Only the first 15 lines of the commit message are shown above )