Buffer overflow protection: Difference between revisions

Revision as of 04:00, 3 March 2023

Revision as of 04:02, 3 March 2023

Line 75:

===Clang/[[LLVM]]===

Clang supports the same <kbd>-fstack-protector</kbd> options as GCC,<ref>{{cite web|url=https://lists.llvm.org/pipermail/cfe-dev/2017-April/053662.html |publisher=Clang.llvm.org |title=Clang mailing list |access-date=2022-11-16}}</ref> aand lowa overheadstronger "safe stack" ({{tt|1=-fsanitize=safe-stack}}) system that splits unsafe stack variables from safe ones.<ref>{{cite web |title=SafeStack — Clang 17.0.0git documentation |url=https://clang.llvm.org/docs/SafeStack.html |website=clang.llvm.org}}</ref> Clang also has three buffer overflow detectors, namely

[[AddressSanitizer]] (<tt>-fsanitize=address</tt>),<ref name="asan"/> UBSan (<tt>-fsanitize=bounds</tt>),<ref>{{cite web|url=http://clang.llvm.org/docs/UsersManual.html |title=Clang Compiler User's Manual — Clang 3.5 documentation |publisher=Clang.llvm.org |access-date=2014-04-27}}</ref>

and the unofficial SafeCode (last updated for LLVM 3.0).<ref>{{cite web|url=http://safecode.cs.illinois.edu/ |title=SAFECode |publisher=Safecode.cs.illinois.edu |access-date=2014-04-27}}</ref>