FM / gcc-9-base

/usr/share/doc/gcc-9-base

Name	Size	Mode	Actions
fortran/	-	0755	rm
gcc/	-	0755	rm
gomp/	-	0755	rm
itm/	-	0755	rm
quadmath/	-	0755	rm
sanitizer/	-	0755	rm
changelog.Debian.gz	184099	0644	edit dl rm
changelog.gz	161067	0644	edit dl rm
copyright	75285	0644	edit dl rm
NEWS.gz	15173	0644	edit dl rm
NEWS.html	65508	0644	edit dl rm
README.Bugs	11156	0644	edit dl rm
README.Debian.amd64.gz	3847	0644	edit dl rm
README.ssp	1165	0644	edit dl rm
TODO.Debian	1653	0644	edit dl rm

Edit: /usr/share/doc/gcc-9-base/README.ssp (1165B)

Stack smashing protection is a feature of GCC that enables a program to
detect buffer overflows and immediately terminate execution, rather than
continuing execution with corrupt internal data structures. It uses
"canaries" and local variable reordering to reduce the likelihood of
stack corruption through buffer overflows.

Options that affect stack smashing protection:

-fstack-protector
    Enables protection for functions that are vulnerable to stack
    smashing, such as those that call alloca() or use pointers.

-fstack-protector-all
    Enables protection for all functions.

-Wstack-protector
    Warns about functions that will not be protected. Only active when
    -fstack-protector has been used.

Applications built with stack smashing protection should link with the
ssp library by using the option "-lssp" for systems with glibc-2.3.x or
older; glibc-2.4 and newer versions provide this functionality in libc.

The Debian architectures alpha, hppa, ia64, m68k, mips, mipsel do not
have support for stack smashing protection.

More documentation can be found at the project's website:
http://researchweb.watson.ibm.com/trl/projects/security/ssp/

cmd: