[arch-dev-public] Add -fstack-protector{-all} to default CFLAGS?

Jan de Groot jan at jgc.homeip.net
Wed May 12 11:06:12 EDT 2010


On Wed, 2010-05-12 at 09:24 -0500, Dan McGee wrote:
> This isn't some -fix-all-your-code option. It *will* make things crash
> if there are buffer overflows. It doesn't magically prevent them from
> happening. That to me would be incentive enough if I was coding
> upstream to fix my software.

This change will make code segfault or assert on exploit attempt. It
won't fix code automatically, it just prevents exploiting them.



More information about the arch-dev-public mailing list