[cobalt-users] RaQ4, PHP and IMAP with StackGuard

[Jeremy Wadsack <jwadsack@xxxxxxxxxxxxxxxxx>]

I have spent two days searching the web, list archives, support
forums, etc. and have not found any solutions that work yet.

Has anyone successfully installed PHP 4.3.0 (or later) on a RaQ with
the newer StackGuarded binaries?

The problem is that the imap and imap-devel libs (c-client.a and
libc-client.a in particular) were built with StackGuard to protect
buffer overflow vulnerabilites in the last (two) IMAP updates from
Cobalt. But Cobalt has not seen fit to provide any StackGuard
libraries, header files or a StackGuard-enabled GCC.

When I try to build PHP 4.3.0 using --with-imap, it fails with errors
(fallaciously referring to needing --with-imap-ssl). Looking at the
config.log I see multiple errors, "undefined reference to
`__canary_death_handler'"

The solutions I have considered include:

1] Rollback imap to before StackGuard was added. Don't really want to
do that because it does provide SOME protection.

2] Build PHP without IMAP support (clients aren't happy with this)

3] Build a separate imap without StackGuard and link against that. I
tried this, but PHP still wants to read the installed imap when it
gets to the imap-ssl stage. (I will continue to work this front.)

4] Build a gcc with StackGuard. I really don't want to have to do
this.

Any other thoughts? Any solutions?

TIA,



-- 

Jeremy Wadsack
Wadsack-Allen Digital Group