-fstack-protector vs -fstack-protector-strong for x86-64 server binaries under runtime-overhead limits
Goal I need to select a stack-protector level for x86-64 server binaries built with GCC, bounding runtime overhead while maximizing buffer-overflow coverage. Constraints -fstack-protector emits canaries only for functions with local character arrays. -fstack-protector-strong extends coverage to functions with local arrays, address-taken locals, or frame-addr