c-compiler-security

c-compiler-security copied to clipboard

Control Flow Integrity and Shadow Stack?

1

Currently, for the GCC 12 and Clang 11 TL;DR, I don't see the control flow integrity flag mentioned on the detailed page... is this because it is Intel specific? `-fcf-protection=full`...

hiowaguy

Moar options!

1

`-D_FORTIFY_SOURCE=3` exists now. `-ftrivial-auto-var-init=zero` is in GCC 12+ and Clang. `-fsanitize=bounds -fsanitize-undefined-trap-on-error` for trivial checking of known-size arrays. `-fstrict-flex-arrays` will be in GCC 13+ and Clang 16+, but likely requires...

kees