[libc-commits] [libc] [libc] fortify jmp buffer for x86-64 (PR #112769)

Nick Desaulniers via libc-commits libc-commits at lists.llvm.org
Mon Dec 2 13:23:23 PST 2024


================
@@ -0,0 +1,8 @@
+{
+    "setjmp": {
+        "LIBC_CONF_SETJMP_FORTIFICATION": {
+            "value": true,
+            "doc": "Protect jmp_buf by masking its contents and storing a simple checksum, to make it harder for an attacker to read meaningful information from a jmp_buf or to modify it. This is only supported on x86-64 Linux."
----------------
nickdesaulniers wrote:

Perhaps this should be one config. Otherwise, if the user flips one but not the other, then setjmp/longjmp will fail at runtime, right?

https://github.com/llvm/llvm-project/pull/112769


More information about the libc-commits mailing list