CONFIG_CC_STACKPROTECTOR:

General informations

The Linux kernel configuration item CONFIG_CC_STACKPROTECTOR has multiple definitions:

found in arch/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt:
• type: bool
• depends on: (none)
• defined in arch/Kconfig
• found in Linux kernels: 3.14–3.19, 4.0–4.15

Help text

Set when a stack-protector mode is enabled, so that the build can enable kernel-side support for the GCC feature.

Enable -fstack-protector buffer overflow detection (EXPERIMENTAL) found in arch/sh/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt: Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)
• type: bool
• depends on: CONFIG_SUPERH32
• defined in arch/sh/Kconfig
• found in Linux kernels: 3.5–3.13

Help text

This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of functions, a canary value on the stack just before the return address, and validates the value just before actually returning. Stack based buffer overflows (that need to overwrite this return address) now also overwrite the canary, which gets detected and the attack is then neutralized via a kernel panic.

This feature requires gcc version 4.2 or above.

Enable -fstack-protector buffer overflow detection (EXPERIMENTAL) found in arch/mips/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt: Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)
• type: bool
• depends on: (none)
• defined in arch/mips/Kconfig
• found in Linux kernels: 3.11–3.13

Help text

This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of functions, a canary value on the stack just before the return address, and validates the value just before actually returning. Stack based buffer overflows (that need to overwrite this return address) now also overwrite the canary, which gets detected and the attack is then neutralized via a kernel panic.

This feature requires gcc version 4.2 or above.

Enable -fstack-protector buffer overflow detection (EXPERIMENTAL) found in arch/arm/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt: Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)
• type: bool
• depends on: (none)
• defined in arch/arm/Kconfig
• found in Linux kernels: 2.6.36–2.6.39, 3.0–3.13

Help text

This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of functions, a canary value on the stack just before the return address, and validates the value just before actually returning. Stack based buffer overflows (that need to overwrite this return address) now also overwrite the canary, which gets detected and the attack is then neutralized via a kernel panic. This feature requires gcc version 4.2 or above.

Enable -fstack-protector buffer overflow detection found in arch/x86/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt: Enable -fstack-protector buffer overflow detection
• type: bool
• depends on: (none)
• defined in arch/x86/Kconfig
• found in Linux kernels: 3.6–3.13

Help text

This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of functions, a canary value on the stack just before the return address, and validates the value just before actually returning. Stack based buffer overflows (that need to overwrite this return address) now also overwrite the canary, which gets detected and the attack is then neutralized via a kernel panic.

This feature requires gcc version 4.2 or above, or a distribution gcc with the feature backported. Older versions are automatically detected and for those versions, this configuration option is ignored. (and a warning is printed during bootup)

Enable -fstack-protector buffer overflow detection (EXPERIMENTAL) found in arch/x86/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt: Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)
• type: bool
• depends on: (none)
• defined in arch/x86/Kconfig
• found in Linux kernels: 2.6.24–2.6.39, 3.0–3.5

Help text

This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of functions, a canary value on the stack just before the return address, and validates the value just before actually returning. Stack based buffer overflows (that need to overwrite this return address) now also overwrite the canary, which gets detected and the attack is then neutralized via a kernel panic.

This feature requires gcc version 4.2 or above, or a distribution gcc with the feature backported. Older versions are automatically detected and for those versions, this configuration option is ignored. (and a warning is printed during bootup)

Enable -fstack-protector buffer overflow detection (EXPERIMENTAL) found in arch/x86_64/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt: Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)
• type: bool
• depends on: CONFIG_EXPERIMENTAL
• defined in arch/x86_64/Kconfig
• found in Linux kernels: 2.6.20–2.6.23

Help text

This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of critical functions, a canary value on the stack just before the return address, and validates the value just before actually returning. Stack based buffer overflows (that need to overwrite this return address) now also overwrite the canary, which gets detected and the attack is then neutralized via a kernel panic.

This feature requires gcc version 4.2 or above, or a distribution gcc with the feature backported. Older versions are automatically detected and for those versions, this configuration option is ignored.

Enable -fstack-protector buffer overflow detection (EXPRIMENTAL) found in arch/x86_64/Kconfig

The configuration item CONFIG_CC_STACKPROTECTOR:

• prompt: Enable -fstack-protector buffer overflow detection (EXPRIMENTAL)
• type: bool
• depends on: CONFIG_EXPERIMENTAL
• defined in arch/x86_64/Kconfig
• found in Linux kernels: 2.6.19

Help text

This option turns on the -fstack-protector GCC feature. This feature puts, at the beginning of critical functions, a canary value on the stack just before the return address, and validates the value just before actually returning. Stack based buffer overflows (that need to overwrite this return address) now also overwrite the canary, which gets detected and the attack is then neutralized via a kernel panic.

This feature requires gcc version 4.2 or above, or a distribution gcc with the feature backported. Older versions are automatically detected and for those versions, this configuration option is ignored.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: