What is the difference between gcc option -D_FORTIFY_SOURCE and kernel configuration CONFIG_FORTIFY_SOURCE

205 Views Asked by At

I want to confirm the difference between gcc option -D_FORTIFY_SOURCE and kernel configuration CONFIG_FORTIFY_SOURCE. As far as I could understand, gcc option -D_FORTIFY_SOURCE is for compile time checks where out of bounds check is done for str and mem functions. Kernel configuration CONFIG_FORTIFY_SOURCE=y is for run time checks where at run time, kernel code checks for out of bounds errors. Is this correct understanding ?

0

There are 0 best solutions below