[PATCH] Add a new option "-fstack-protector-strong"

Gerald Pfeifer gerald@pfeifer.com
Sun Aug 18 19:43:00 GMT 2013


Hi H.,

On Mon, 15 Apr 2013, Han Shen(沈涵) wrote:
> Hi, I'm to bring up this patch about '-fstack-protector-strong' for trunk.
> 
> Background - some times stack-protector is too-simple while
> stack-protector-all over-kills, for example, to build one of our core
> systems, we forcibly add "-fstack-protector-all" to all compile
> commands, which brings big performance penalty (due to extra stack
> guard/check insns on function prologue and epilogue) on both atom and
> arm. To use "-fstack-protector" is just regarded as not secure enough
> (only "protects" <2% functions) by the system secure team. So I'd like
> to add the option "-fstack-protector-strong", that hits the balance
> between "-fstack-protector" and "-fstack-protector-all".

the patch has been committed, but I see that the release notes
at http://gcc.gnu.org/gcc-4.9/changes.html do not mentioned this.

Can you please add a note?  (http://gcc.gnu.org/about.html has
some background on our web site setup, and I am working to
consolidate all our documentation in this area -- plus I am
happy to lend a helping hand.)

Gerald


More information about the Gcc-patches mailing list