From Fedora Project Wiki
(Created page with "== Hardening detection: <code>-fstack-check</code> == We might want to enable <code>-fstack-check</code>, to make sure that stack overflows lead to crashes reliably (without ...") |
(No difference)
|
Latest revision as of 10:58, 24 October 2016
Hardening detection: -fstack-check
We might want to enable -fstack-check
, to make sure that stack overflows lead to crashes reliably (without any potential for code execution). Then we need a way to check that all functions/objects are compiled with it.
Due to way -fstack-check
is implemented, this depends on page size information. It could be useful to cross-check functions not instrumented for stack size against the recorded stack space requirement.