CONFIG_STACKPROTECTOR_STRONG: Strong Stack Protector

General informations

The Linux kernel configuration item CONFIG_STACKPROTECTOR_STRONG:

• prompt: Strong Stack Protector
• type: bool
• depends on: ( CONFIG_STACKPROTECTOR ) && ($( CONFIG_cc-option,-fstack-protector-strong ))
• defined in arch/Kconfig
• found in Linux kernels: 4.18–4.20, 5.0–5.19, 6.0–6.14, 6.15-rc+HEAD

Help text

Functions will have the stack-protector canary logic added in any of the following conditions:

- local variable's address used as part of the right hand side of an assignment or function argument - local variable is an array (or union containing an array), regardless of array type or length - uses register local variables

This feature requires gcc version 4.9 or above, or a distribution gcc with the feature backported ("-fstack-protector-strong").

On an x86 "defconfig" build, this feature adds canary checks to about 20% of all kernel functions, which increases the kernel code size by about 2%.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: