logoalt Hacker News

prussian • yesterday at 2:34 PM • 1 reply • view on HN

Fedora and its kernels are built with GCC's _FORTIFY_SOURCE and I've seen modules crash for out of bounds reads.

Replies

dezgeg • yesterday at 3:05 PM

_FORTIFY_SOURCE is way smaller in scope (as in, closes less vulnerabilities) than -fbounds-safety.