From: Alexander Popov <alex.popov@linux.com>
Date: Fri, 22 Apr 2022 10:13:05 +0000 (+0300)
Subject: Add the STACKPROTECTOR check from KSPP
X-Git-Tag: v0.5.17~3
X-Git-Url: https://jxself.org/git/?a=commitdiff_plain;h=61bfef8931bcefc1abb6d3d46e169c8372ce729b;p=kconfig-hardened-check.git

Add the STACKPROTECTOR check from KSPP

Thanks to @izh1979 for the idea.
---

diff --git a/kconfig_hardened_check/__init__.py b/kconfig_hardened_check/__init__.py
index 493d177..a40d8f2 100644
--- a/kconfig_hardened_check/__init__.py
+++ b/kconfig_hardened_check/__init__.py
@@ -326,6 +326,8 @@ def add_kconfig_checks(l, arch):
     l += [KconfigCheck('self_protection', 'defconfig', 'BUG', 'y')]
     l += [KconfigCheck('self_protection', 'defconfig', 'SLUB_DEBUG', 'y')]
     l += [KconfigCheck('self_protection', 'defconfig', 'GCC_PLUGINS', 'y')]
+    l += [OR(KconfigCheck('self_protection', 'defconfig', 'STACKPROTECTOR', 'y'),
+             KconfigCheck('self_protection', 'defconfig', 'CC_STACKPROTECTOR', 'y'))]
     l += [OR(KconfigCheck('self_protection', 'defconfig', 'STACKPROTECTOR_STRONG', 'y'),
              KconfigCheck('self_protection', 'defconfig', 'CC_STACKPROTECTOR_STRONG', 'y'))]
     l += [OR(KconfigCheck('self_protection', 'defconfig', 'STRICT_KERNEL_RWX', 'y'),