Stack Check Support in GNU Compiler Collection*(GCC)
The first stack guard is supported in GCC. Current GCC supports: -fstack-protector, -fstack-protector-all, and -fstack-protector-strong
.[StackCanaries] [1] .
-fstack-protector-strong
is recommended because “this option tries to hit the balance between an over-simplified version and an over-killing protection schema”. [GCC] [2]
[1] [StackCanaries] Buffer overflow protection - Wikipedia.org
[2] [GCC] Proposal to add a new stack-smashing-attack protection mechanism “-fstack-protector-strong”