3 ms·

Apparently nobody wants to take the 'secure default' performance hit of setting CONFIG_INIT_STACK_ALL_ZERO , as it will look slower compared to other distros.

• mustache_kimono 5y ago
  Yeesh.
• pjmlp 5y ago
  Android and Windows do take that hit. https://android-developers.googleblog.com/2020/06/system-hardening-in-android-11.html?m=1 https://android-developers.googleblog.com/2020/06/system-har... https://msrc-blog.microsoft.com/2020/05/13/solving-uninitialized-stack-memory-on-windows/ https://msrc-blog.microsoft.com/2020/05/13/solving-uninitial...
• josefx 5y ago
  As far as I can find that flag seems to be clang specific? Which distros even use clang? Also since the Kernel is not pure C not all safety options are safe, at one point a few distros enabled stack overflow protection, only to end up with a kernel that randomly corrupted application stacks.
  • gpderetta 5y ago
    GCC 12 will have -ftrivial-auto-var-init=zero
  • pjmlp 5y ago
    > Which distros even use clang? Altough not a proper distro, Android's Linux kernel has been using clang for about 5 years now.