We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
GCC and clang compiler offer feature to allocate discontinuous stack when running out of stack memory. The -fsplit-stack option activates this behavior on GCC (https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html#index-fsplit-stack / https://gcc.gnu.org/wiki/SplitStacks) and clang (https://llvm.org/docs/SegmentedStacks.html).
-fsplit-stack
This option can mitigate some stack exhaustion issues.
Do you think this option may have its place on "Compiler Hardening Guide"?
Regards,
The text was updated successfully, but these errors were encountered:
Information about security benefits of split-stack option can be found on a article from Red-Hat website : https://developers.redhat.com/articles/2022/06/02/use-compiler-flags-stack-protection-gcc-and-clang#
split-stack
We have the chance to have one of the two authors, @siddhesh, already contributing to the guide. Maybe this option was already discussed.
Sorry, something went wrong.
Has this been addressed by the C/C++ Compiler Hardening options guide? @gkunz @thomasnyman @david-a-wheeler
No branches or pull requests
GCC and clang compiler offer feature to allocate discontinuous stack when running out of stack memory. The
-fsplit-stack
option activates this behavior on GCC (https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html#index-fsplit-stack / https://gcc.gnu.org/wiki/SplitStacks) and clang (https://llvm.org/docs/SegmentedStacks.html).This option can mitigate some stack exhaustion issues.
Do you think this option may have its place on "Compiler Hardening Guide"?
Regards,
The text was updated successfully, but these errors were encountered: