Editorial question83.6K views2,037 votes0 answers4,740 following
AI-generated-fstack-protector vs -fstack-protector-strong for x86-64 server binaries under runtime-overhead limits
Goal I need to select a stack-protector level for x86-64 server binaries built with GCC, bounding runtime overhead while maximizing buffer-overflow coverage. Constraints -fstack-protector emits canaries only for functions with local character arrays. -fstack-protector-strong extends coverage to functions with local arrays, address-taken locals, or frame-addr