|
@@ -1142,7 +1142,7 @@ config SECCOMP
|
|
|
|
|
|
config CC_STACKPROTECTOR
|
|
|
bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)"
|
|
|
- depends on X86_64 && EXPERIMENTAL && BROKEN
|
|
|
+ depends on X86_64
|
|
|
help
|
|
|
This option turns on the -fstack-protector GCC feature. This
|
|
|
feature puts, at the beginning of critical functions, a canary
|
|
@@ -1159,6 +1159,7 @@ config CC_STACKPROTECTOR
|
|
|
config CC_STACKPROTECTOR_ALL
|
|
|
bool "Use stack-protector for all functions"
|
|
|
depends on CC_STACKPROTECTOR
|
|
|
+ default y
|
|
|
help
|
|
|
Normally, GCC only inserts the canary value protection for
|
|
|
functions that use large-ish on-stack buffers. By enabling
|