[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PATCH v2 0/2] topic: meson: add more compiler hardening flags
From: |
Daniel P . Berrangé |
Subject: |
[PATCH v2 0/2] topic: meson: add more compiler hardening flags |
Date: |
Wed, 3 Jan 2024 12:34:12 +0000 |
This brings more compiler hardening flags to the default QEMU
build process. The proposed flags have already been adopted by
default in the kernel build process. At some point it is hoped
that distros might enable them globally, as they've done in
the past with things like _FORTIFY_SOURCE. Meanwhile they are
easy things to enable in QEMU which have negligible cost and
clear benefits to hardening. Considering QEMU shows no signs
of stoppping the flow of guest triggerable CVEs, investing in
hardening is worthwhile. See the respective commit messages
for details
Changed in v2:
* Fix spelling of -ftrivial-auto-var-init option
Daniel P. Berrangé (2):
meson: mitigate against ROP exploits with -fzero-call-used-regs
meson: mitigate against use of uninitialize stack for exploits
meson.build | 16 ++++++++++++++++
1 file changed, 16 insertions(+)
--
2.43.0