{"action":"created","issue":{"url":"https://api.github.com/repos/MoonchildProductions/Pale-Moon/issues/371","repository_url":"https://api.github.com/repos/MoonchildProductions/Pale-Moon","labels_url":"https://api.github.com/repos/MoonchildProductions/Pale-Moon/issues/371/labels{/name}","comments_url":"https://api.github.com/repos/MoonchildProductions/Pale-Moon/issues/371/comments","events_url":"https://api.github.com/repos/MoonchildProductions/Pale-Moon/issues/371/events","html_url":"https://github.com/MoonchildProductions/Pale-Moon/issues/371","id":134953523,"number":371,"title":"Use hardened build options (PIE, Fortify Source, Immediate Binding, Stack Protection...)","user":{"login":"luchr","id":7441996,"avatar_url":"https://avatars.githubusercontent.com/u/7441996?v=3","gravatar_id":"","url":"https://api.github.com/users/luchr","html_url":"https://github.com/luchr","followers_url":"https://api.github.com/users/luchr/followers","following_url":"https://api.github.com/users/luchr/following{/other_user}","gists_url":"https://api.github.com/users/luchr/gists{/gist_id}","starred_url":"https://api.github.com/users/luchr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/luchr/subscriptions","organizations_url":"https://api.github.com/users/luchr/orgs","repos_url":"https://api.github.com/users/luchr/repos","events_url":"https://api.github.com/users/luchr/events{/privacy}","received_events_url":"https://api.github.com/users/luchr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-19T19:35:00Z","updated_at":"2016-02-19T20:17:37Z","closed_at":null,"body":"Please think about\r\n\r\n1. adding an option for building position independent executables on gcc/clang, [see Mozilla changeset d38de091ced0](https://hg.mozilla.org/mozilla-central/rev/d38de091ced0)\r\n1. using stack-protection compile-time options like `-fstack-protector-strong`\r\n1. using `_FORTIFY_SOURCE`\r\n1. using `-z relro` and/or `-z now` for linking\r\n\r\nto build a hardened version of Pale Moon. [There are linux distributions that build Firefox with these hardening options.]"},"comment":{"url":"https://api.github.com/repos/MoonchildProductions/Pale-Moon/issues/comments/186387076","html_url":"https://github.com/MoonchildProductions/Pale-Moon/issues/371#issuecomment-186387076","issue_url":"https://api.github.com/repos/MoonchildProductions/Pale-Moon/issues/371","id":186387076,"user":{"login":"trav90","id":10595410,"avatar_url":"https://avatars.githubusercontent.com/u/10595410?v=3","gravatar_id":"","url":"https://api.github.com/users/trav90","html_url":"https://github.com/trav90","followers_url":"https://api.github.com/users/trav90/followers","following_url":"https://api.github.com/users/trav90/following{/other_user}","gists_url":"https://api.github.com/users/trav90/gists{/gist_id}","starred_url":"https://api.github.com/users/trav90/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/trav90/subscriptions","organizations_url":"https://api.github.com/users/trav90/orgs","repos_url":"https://api.github.com/users/trav90/repos","events_url":"https://api.github.com/users/trav90/events{/privacy}","received_events_url":"https://api.github.com/users/trav90/received_events","type":"User","site_admin":false},"created_at":"2016-02-19T20:17:37Z","updated_at":"2016-02-19T20:17:37Z","body":"1. Could you please elaborate on the advantages of using PIE?\r\n2. `-fstack-protector-strong` is not used in the builds released by us because the underlying code is not static. Note that the Windows builds do not use stack protection either.\r\n3. `FORTIFY_SOURCE` is not used, as it can (in some cases) cause stability issues, and will need an EXTENSIVE amount of regression testing. It is also reported to lower performance on 32bit builds.\r\n\r\n4 `-z relro` is already used beginning with Pale Moon 26.0"}}