svn commit: r47030 - head/en_US.ISO8859-1/htdocs/news/status

Mon Jul 20 20:40:01 UTC 2015

Author: wblock
Date: Mon Jul 20 20:40:00 2015
New Revision: 47030
URL: https://svnweb.freebsd.org/changeset/doc/47030

Log:
  Add Pedro Giffuni <pfg at FreeBSD.org>'s libc security extensions GSoC
  report.

Modified:
  head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml

Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml
==============================================================================

--- head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml	Mon Jul 20 20:22:51 2015	(r47029)
+++ head/en_US.ISO8859-1/htdocs/news/status/report-2015-04-2015-06.xml	Mon Jul 20 20:40:00 2015	(r47030)
@@ -81,6 +81,12 @@
   </category>
 
   <category>
+    <name>gsoc</name>
+
+    <description>Google Summer of Code</description>
+  </category>
+
+  <category>
     <name>misc</name>
 
     <description>Miscellaneous</description>
@@ -2913,7 +2919,7 @@
 	Daroussin, Bryan Drewery, Dimitry Andric, Andrew Turner,
 	Warner Losh, Ian Lapore, and Brooks Davis.</p>
 
-      <p>We are currently targetting packages for head on
+      <p>We are currently targeting packages for head on
 	<tt>mips</tt>, <tt>mips64</tt> and <tt>armv6</tt>.  Each set
 	takes one to two weeks to build on QEMU.  They will be
 	provided on a best effort basis for now on the default
@@ -2960,4 +2966,76 @@
       </task>
     </help>
   </project>
+
+  <project cat='gsoc'>
+    <title>GSoC 2015: <tt>libc</tt> Security Extensions</title>
+
+    <contact>
+      <person>
+	<name>
+	  <given>Pedro</given>
+	  <common>Giffuni</common>
+	</name>
+	<email>pfg at FreeBSD.org</email>
+      </person>
+
+      <person>
+	<name>
+	  <given>Oliver</given>
+	  <common>Pinter</common>
+	</name>
+	<email>op at FreeBSD.org</email>
+      </person>
+    </contact>
+
+    <links>
+      <url href="https://wiki.freebsd.org/SummerOfCode2015/FreeBSDLibcSecurityExtensions">Project
+	Wiki Page</url>
+      <url href="https://reviews.freebsd.org/D3043">Code Review
+	Differential</url>
+    </links>
+
+    <body>
+      <p>As part of this year's Google Summer of Code, we have been
+	adding support for the <tt>_FORTIFY_SOURCE</tt> extension to
+	<tt>libc</tt>.  This extension uses the GCC
+	<tt>builtin_object_size</tt> to prevent buffer overflows on
+	existing code.  The compiler and the C library can effectively
+	detect a set of common programming mistakes.</p>
+
+      <p>The current status is that a mixed version of the NetBSD and
+	Android implementations has been ported and is currently
+	undergoing heavy testing.  On &os;, this code has already
+	found two small bugs.  On the other hand, the &os; codebase
+	is extremely useful to test the framework.</p>
+    </body>
+
+    <sponsor>
+      Google Summer of Code Program
+    </sponsor>
+
+    <help>
+      <task>
+	<p>Code review and more buildworld testing with GCC.</p>
+      </task>
+
+      <task>
+	<p>Integration tests, especially on non-x86 platforms.</p>
+      </task>
+
+      <task>
+	<p>Documentation: the framework is relatively popular on GNU
+	  libc but we still have to work on better documentation.</p>
+      </task>
+
+      <task>
+	<p>Testing and possibly integrating with ports.</p>
+      </task>
+
+      <task>
+	<p>We will have to re-schedule the GSoC project, as we were
+	  expecting to spend less time on this.</p>
+      </task>
+    </help>
+  </project>
 </report>
