libcrashlytics-trampoline does not have a stack canary value added to the stack #6819
sabrina-tw
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
We have recently run some security scanning and found that libcrashlytics-trampoline does not have a stack canary value added to the stack:
Stack canaries are used to detect and prevent exploits from overwriting return address.
It can be enabled by using the option -fstack-protector-all.
Could we look into enabling stack canaries for libcrashlytics-trampoline?
Thanks!
Beta Was this translation helpful? Give feedback.
All reactions