Post #2991562
2026-03-03 19:14 UTC
@jann@infosec.exchange Lovely research! Underpins why one shouldn't underestimate compiler hardening flags!
Replies (1)
-
@jann@infosec.exchange 2026-03-03 20:01
@ljrk@todon.eu Yeah, stack overflows in particular feel to me like the programmer isn't really making a particular mistake that can be called a security bug, it just randomly happens in legitimate code... and the only thing that can reliably stop it is the compiler. So it kinda feels wrong to me to call it a hardening flag, it feels more like a... correctness flag?