-fstack-protector-strong vs -fstack-protector-all under a runtime-overhead budget
A production GCC build requires stack-buffer-overflow mitigation under a runtime-overhead budget with attention to code size and instruction-cache effects. The decision is between -fstack-protector-strong and -fstack-protector-all, where coverage is not equivalent and overhead is workload and target dependent. The build may target a custom or freestanding C