diff options
| author | Dan Albert <danalbert@google.com> | 2019-09-04 13:20:59 -0700 |
|---|---|---|
| committer | Dan Albert <danalbert@google.com> | 2019-09-04 13:20:59 -0700 |
| commit | ff3acaf8bcfb05ce65b795c2ae24f7543968019e (patch) | |
| tree | 87e5adada20aa2e47e96c653f3af9d84f73936b4 /docs | |
| parent | d0bb5bc2b9e4592cf09a6c4a2231194fe51b5315 (diff) | |
| download | ndk-ff3acaf8bcfb05ce65b795c2ae24f7543968019e.tar.gz | |
Document `-fstack-protector-strong`.
Test: None
Bug: https://github.com/android-ndk/ndk/issues/944
Change-Id: I202f78f0ac231108dc768928fb764f49f482b112
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/BuildSystemMaintainers.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/docs/BuildSystemMaintainers.md b/docs/BuildSystemMaintainers.md index 4aced904c..5be2a5935 100644 --- a/docs/BuildSystemMaintainers.md +++ b/docs/BuildSystemMaintainers.md @@ -447,6 +447,15 @@ Clang will usually turn into a bug. For more information on Clang's supported arguments, see the [Clang User Manual]. +### Hardening + +It is recommented to build all code with `-fstack-protector-strong`. This causes +the compiler to emit stack guards to protect against security vulnerabilities +caused by buffer overruns. + +Note: ndk-build and the NDK's CMake toolchain file enable this option by +default. + ## Common Issues ### Unwinding |