diff options
| author | Treehugger Robot <treehugger-gerrit@google.com> | 2019-09-04 21:07:42 +0000 |
|---|---|---|
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2019-09-04 21:07:42 +0000 |
| commit | bb1931a80e4cb52783ea790bba1c4ad540f0b17a (patch) | |
| tree | 0db636f367b4ac15f1828138f6fabef0ac277f45 /docs | |
| parent | 2ba9bc107ef3bb29dad1082d05c33d9325fbcffd (diff) | |
| parent | ff3acaf8bcfb05ce65b795c2ae24f7543968019e (diff) | |
| download | ndk-bb1931a80e4cb52783ea790bba1c4ad540f0b17a.tar.gz | |
Merge "Document `-fstack-protector-strong`."
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/BuildSystemMaintainers.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/docs/BuildSystemMaintainers.md b/docs/BuildSystemMaintainers.md index 8de249540..426ef9f5a 100644 --- a/docs/BuildSystemMaintainers.md +++ b/docs/BuildSystemMaintainers.md @@ -442,6 +442,15 @@ Clang will usually turn into a bug. For more information on Clang's supported arguments, see the [Clang User Manual]. +### Hardening + +It is recommented to build all code with `-fstack-protector-strong`. This causes +the compiler to emit stack guards to protect against security vulnerabilities +caused by buffer overruns. + +Note: ndk-build and the NDK's CMake toolchain file enable this option by +default. + ## Common Issues ### Unwinding |