From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail05.groups.io (mail05.groups.io [45.79.224.7]) by spool.mail.gandi.net (Postfix) with ESMTPS id D3280D801B4 for ; Fri, 2 Aug 2024 18:13:14 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=KDV1VpYQjUtvIV5vukFnciJxOQvfDAMd6YoFCn8SBPo=; c=relaxed/simple; d=groups.io; h=DKIM-Filter:Message-ID:Date:MIME-Version:User-Agent:To:From:Subject:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Resent-Date:Resent-From:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Language:Content-Type:Content-Transfer-Encoding; s=20240206; t=1722622394; v=1; b=pV7q7GE9JDay+8eHN41bSKbDqflut2NJL4rSMH5FOp4CLsLDU9tUth2Kt3igSaVT15xNzDBs oUmWRJpjEJ0ltAaZzQQJs4MquYvQH16nUvYglipyNbAq4be8Xf35XMrLRpdwJdepAp+dzmKG036 8k8o3M15G0E59b20kWiNmgMQNoS/biHxLZicZ32oepvu9I+KTNNvCpFHQnFrYxaI4gK0Y4Ze6T9 1p4Rstxx+BiajXWCxRZdGO5b9cbCIrulGYfymOySHWxWJsTW7kqbGlJ/FXuI0S30sgtC+X1VqGg NMgeVmz9i9EcvxMy9p/5AR3bp8YJZRnii5b4KNDHwOSEQ== X-Received: by 127.0.0.2 with SMTP id tyhzYY7687511x6Qu5YLJKph; Fri, 02 Aug 2024 11:13:13 -0700 X-Received: from linux.microsoft.com (linux.microsoft.com [13.77.154.182]) by mx.groups.io with SMTP id smtpd.web10.2237.1722622390715705248 for ; Fri, 02 Aug 2024 11:13:10 -0700 X-Received: from [10.137.194.171] (unknown [131.107.159.43]) by linux.microsoft.com (Postfix) with ESMTPSA id 201E420B7165 for ; Fri, 2 Aug 2024 11:13:10 -0700 (PDT) DKIM-Filter: OpenDKIM Filter v2.11.0 linux.microsoft.com 201E420B7165 Message-ID: <8b5c4b73-122d-409f-9485-94ce44aa843e@linux.microsoft.com> Date: Fri, 2 Aug 2024 11:13:09 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: "devel@edk2.groups.io" From: "Oliver Smith-Denny" Subject: [edk2-devel] [RFC] Stack Cookie PR Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Resent-Date: Fri, 02 Aug 2024 11:13:10 -0700 Resent-From: osde@linux.microsoft.com Reply-To: devel@edk2.groups.io,osde@linux.microsoft.com List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: X-Gm-Message-State: 4uEmQFV01n8li0s43wYWQR9ux7686176AA= Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=20240206 header.b=pV7q7GE9; spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 45.79.224.7 as permitted sender) smtp.mailfrom=bounce@groups.io; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=linux.microsoft.com (policy=none) Hi folks, I have a PR up in edk2: https://github.com/tianocore/edk2/pull/5957 that adds Stack Cookie support to MSVC and GCC built IA32, X64, ARM, and AARCH64 binaries. This corresponds to /GS for MSVC and -fstack-protector for gcc. ARM/AARCH64 stack cookie support already existed in edk2, but this greatly expands it by adding support for build time and runtime stack cookies. By default, all binaries will link against the null stack cookie instance, which does not take action on stack overruns. Please see the PR details for more information, including links for more details on how stack cookies support better security and safety. Please leave any comments on the PR. Thanks, Oliver -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#120216): https://edk2.groups.io/g/devel/message/120216 Mute This Topic: https://groups.io/mt/107689957/7686176 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io] -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-