openwrt/config
Cedric DOURLENT 869f8b21e7 build: add option for building with stack-protector-all
The GCC option -fstack-protector-all is a security feature used to protect against stack-smashing attacks.
This option enhances the stack-smashing protection provided by -fstack-protector-strong.
-fstack-protector-all option applies stack protection to all functions, regardless of their characteristics.
While this offers the most comprehensive protection against stack-smashing attacks, it can significantly impact
the performance of the program because every function call includes additional checks for stack integrity.
This option can incur a performance penalty because of the extra checks added to every function call,
but it significantly enhances security, making it harder for attackers to exploit buffer overflows to execute arbitrary code.
It's particularly useful in scenarios where security is paramount and performance trade-offs are acceptable.

Signed-off-by: Cedric DOURLENT <cedric.dourlent@softathome.com>
2024-01-19 21:27:14 +01:00
..
Config-build.in build: add option for building with stack-protector-all 2024-01-19 21:27:14 +01:00
Config-devel.in treewide: strip useless `default n` Kconfig lines 2023-02-03 12:50:15 +01:00
Config-images.in target: Make TARGET_SERIAL independent of GRUB configuration 2023-11-29 23:43:01 +01:00
Config-kernel.in kernel: provide better control & help for SLUB configuration 2023-11-09 21:23:01 +01:00
check-hostcxx.sh config: add a knob to use the mold linker for packages 2023-07-04 20:25:40 +02:00
check-uname.sh build: add HOST_OS_LINUX and HOST_OS_MACOS config symbols 2021-11-01 16:37:52 +01:00