libcrashlytics-trampoline does not have a stack canary value added to the stack #6819
sabrina-tw
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
We have recently run some security scanning and found that libcrashlytics-trampoline does not have a stack canary value added to the stack:
Stack canaries are used to detect and prevent exploits from overwriting return address.
It can be enabled by using the option -fstack-protector-all.
Could we look into enabling stack canaries for libcrashlytics-trampoline?
Thanks!
Beta Was this translation helpful? Give feedback.
All reactions