summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorjvoisin2025-10-31 21:41:44 +0100
committerjvoisin2025-11-10 23:55:25 +0100
commit558f28473a1dea3d314156f2f3c45f078433ff57 (patch)
treee224e9fe82bef56da8799a1e8e0f962f5318d3fa
parentcef75ee454f0933fe502bc51211213f43840bd6e (diff)
Refresh the readme
Diffstat (limited to '')
-rw-r--r--README110
-rw-r--r--README.md112
2 files changed, 112 insertions, 110 deletions
diff --git a/README b/README
deleted file mode 100644
index 7e9c111..0000000
--- a/README
+++ /dev/null
@@ -1,110 +0,0 @@
1What is it?
2===========
3
4This is a standalone implementation of fortify source[0]. It provides
5compile time buffer checks. It is libc-agnostic and simply overlays the
6system headers by using the #include_next extension found in GCC. It was
7initially intended to be used on musl[1] based Linux distributions[2].
8
9
10Features
11========
12
13- It is portable, works on *BSD, Linux, Solaris and possibly others.
14- It will only trap non-conformant programs. This means that fortify
15 level 2 is treated in the same way as level 1.
16- Avoids making function calls when undefined behaviour has already been
17 invoked. This is handled by using __builtin_trap().
18- Support for out-of-bounds read interfaces, such as send(), write(),
19 fwrite() etc.
20- No ABI is enforced. All of the fortify check functions are inlined
21 into the resulting binary.
22
23
24Sample usage
25============
26
27If you want to quickly test it, you can try something like the following:
28
29cat > fgets.c <<EOF
30#include <stdio.h>
31int
32main(void)
33{
34 char buf[BUFSIZ];
35 fgets(buf, sizeof(buf) + 1, stdin);
36 return 0;
37}
38EOF
39cc -I<path-to-fortify-include-dir> -D_FORTIFY_SOURCE=1 -O1 fgets.c
40./a.out
41
42At this point, the program will safely crash.
43
44
45Supported interfaces
46====================
47
48FD_CLR
49FD_SET
50bcopy
51bzero
52confstr
53fgets
54fgetws
55fread
56fwrite
57getcwd
58getdomainname
59getgroups
60gethostname
61getlogin_r
62mbsnrtowcs
63mbsrtowcs
64mbstowcs
65memcpy
66memmove
67mempcpy
68memset
69poll
70ppoll
71pread
72read
73readlink
74readlinkat
75realpath
76recv
77recvfrom
78send
79sendto
80snprintf
81sprintf
82stpcpy
83stpncpy
84strcat
85strcpy
86strlcat
87strlcpy
88strncat
89strncpy
90ttyname_r
91vsnprintf
92vsprintf
93wcrtomb
94wcscat
95wcscpy
96wcsncat
97wcsncpy
98wcsnrtombs
99wcsrtombs
100wcstombs
101wctomb
102wmemcpy
103wmemmove
104wmemset
105write
106
107
108[0] http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html
109[1] http://www.musl-libc.org/
110[2] http://git.alpinelinux.org/cgit/aports/commit/?id=067a4f28825478911bb62be3b8da758d9722753e
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..fda8cba
--- /dev/null
+++ b/README.md
@@ -0,0 +1,112 @@
1# What is it?
2
3This is a [standalone implementation](https://git.2f30.org/fortify-headers/) of
4[fortify source]( http://gcc.gnu.org/ml/gcc-patches/2004-09/msg02055.html )
5level 3, providing compile time security checks. It is libc-agnostic and simply
6overlays the system headers by using the
7[`#include_next`](https://gcc.gnu.org/onlinedocs/cpp/Wrapper-Headers.html)
8extension found in GCC, and [black
9magic](https://github.com/jvoisin/fortify-headers/commit/fe149628eaae9748be08815d726cc56e8e492c73)
10on Clang. It was initially intended to be used on
11[musl](http://www.musl-libc.org/) based Linux
12distributions like [Alpine Linux](https://alpinelinux.org),
13[Chimera Linux](https://chimera-linux.org/).
14
15
16# Features
17
18- It is portable, works on *BSD, Linux, Solaris and possibly others.
19- It will only trap non-conformant programs. This means that fortify
20 level 2 is treated in the same way as level 1.
21- Avoids making function calls when undefined behaviour has already been
22 invoked. This is handled by using `__builtin_trap()`.
23- Support for out-of-bounds read interfaces, such as send(), write(), fwrite() etc.
24- No ABI is enforced. All of the fortify check functions are inlined
25 into the resulting binary.
26- It has a comprehensive suite of
27 tests, running on multiple versions of Clang and GCC,
28 as well as on C89, C99, C11 and C17.
29
30
31# Sample usage
32
33If you want to quickly test it, you can try something like the following:
34
35```
36cat > fgets.c <<EOF
37#include <stdio.h>
38int
39main(void)
40{
41 char buf[BUFSIZ];
42 fgets(buf, sizeof(buf) + 1, stdin);
43 return 0;
44}
45EOF
46cc -I<path-to-fortify-include-dir> -D_FORTIFY_SOURCE=3 -O1 fgets.c
47./a.out
48```
49
50At this point, the program will safely crash.
51
52
53Supported interfaces
54====================
55
56FD_CLR
57FD_SET
58bcopy
59bzero
60confstr
61fgets
62fgetws
63fread
64fwrite
65getcwd
66getdomainname
67getgroups
68gethostname
69getlogin_r
70mbsnrtowcs
71mbsrtowcs
72mbstowcs
73memcpy
74memmove
75mempcpy
76memset
77poll
78ppoll
79pread
80read
81readlink
82readlinkat
83realpath
84recv
85recvfrom
86send
87sendto
88snprintf
89sprintf
90stpcpy
91stpncpy
92strcat
93strcpy
94strlcat
95strlcpy
96strncat
97strncpy
98ttyname_r
99vsnprintf
100vsprintf
101wcrtomb
102wcscat
103wcscpy
104wcsncat
105wcsncpy
106wcsnrtombs
107wcsrtombs
108wcstombs
109wmemcpy
110wmemmove
111wmemset
112write