[Bug other/77409] CVE-2016-4973 Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=77409

--- Comment #6 from Andrew Pinski <pinskia at gcc dot gnu.org> ---
(In reply to Andrew Pinski from comment #5)
> > NetBSD which provide SSP in libc
> 
> This statement is not true for older versions of netbsd.

And really not true even for the current version of netbsd but they do:
1.70      kristerw  596: #if _FORTIFY_SOURCE > 0
1.69      tls       597: #include <ssp/stdio.h>
1.70      kristerw  598: #endif

http://cvsweb.netbsd.org/bsdweb.cgi/src/include/stdio.h#rev1.69

:)

So again I don't see this as a bug but rather the person thinking
-D_FORTIFY_SOURCE  works without including ssp/*.h on some targets.