fortify-headers - Standalone portable header-based implementation of FORTIFY

Age	Commit message (Collapse)	Author
2023-12-15	Rename some macros to be more namespace-friendly	q66

2023-12-15	Remove superfluous includes	jvoisin
	This should fix #32
2023-09-22	Add more __diagnose_as_builtin annotations	jvoisin

2023-09-21	Properly enable diagnose_as_builtin attribute	jvoisin

2023-08-22	Add hardening for pwrite	jvoisin

2023-08-20	Make use of __diagnose_as_builtin	jvoisin

2023-07-09	Add access annotations to unistd.h	jvoisin

2023-06-25	add initial clang support	Daniel Kolesa

2023-06-25	avoid __extension__ with clang	Daniel Kolesa
	It seems useless and triggers 'error: expected external declaration'
2023-04-13	Make use of __builtin_dynamic_object_size	jvoisin
	GCC and Clang provide __builtin_dynamic_object_size (see documentation: https://gcc.gnu.org/onlinedocs/gcc/Object-Size-Checking.html), so we should make use of it when its available.
2019-03-13	getgroups: do not trap on non-positive gidsetsize	info@mobile-stream.com
	First, we should never check the size of __s if __l == 0 since the array is not going to be modified in that case. Second, negative __l is a well-defined error case (EINVAL) and we should never trap on a conforming code like this: r = getgroups(-1, NULL); if (r == -1) ... An example of non-desired behaviour for negative __l is the gnulib configure script which checks for getgroups(-1, ...) to catch some ancient FreeBSD kernel bug. The conftest binary traps even on good system (e.g. linux/musl) and the unnecessary getgroups wrapper is enforced for any project that uses gnulib. This patch also changes the size_t cast to avoid the explicit zero extension on systems where size_t differs from unsigned int.
2018-07-24	Don't use __extension__ in C++ code	A. Wilcox
	A few important notes: * __extension__ is a GNU C "alternate" keyword, not a C++ keyword.[1] * __extension__ is designed to work on "expressions"; it does work on #include_next in C mode, but it has no effect in C++ mode; the warning will still appear, if enabled, even with __extension__ preceding #include_next. This is because #include_next is not considered an expression in C++, so the compiler attaches __extension__ to the first expression of the header. All of this leads us to a build failure while building at least all Mozilla software. Moz has an alternate -isystem dir searched before /usr/include that overrides some headers, including <features.h>. The first statement in each of these headers is a #pragma, and since __extension__ is looking for an expression, and #pragma is a "null" expression, we end up with the following error: dist/system_wrappers/features.h:1:9: error: '#pragma' is not allowed here Since __extension__ has no effect on #include_next in C++ mode anyway, and since it can cause breakage, this commit omits __extension__ in C++ mode. [1]: https://gcc.gnu.org/onlinedocs/gcc-6.4.0/gcc/Alternate-Keywords.html
2016-09-10	Bump copyright year	sin

2015-07-15	Fix confstr() check	sin
	Do not crash unless the overflow would actually happen.
2015-06-25	Add __extension__ mark to include_next to silence -pedantic	Steven Barth
	Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-22	unistd: fix signed / unsigned comparison in getgroups	Steven Barth
	Signed-off-by: Steven Barth <steven@midlink.org>
2015-06-03	Use namespace-safe macro, param and variable names	Trutz Behn

2015-05-13	Add LICENSE header	sin

2015-05-13	Add fortify_fn() helper in fortify-headers.h	sin

2015-03-14	Use __typeof__ to in part avoid replicating function types	Trutz Behn

2015-03-14	Add __artificial__ to aid in debugging	sin

2015-03-13	Restore C++ support	sin

2015-03-13	Rework fortify implementation to use extern inline	sin
	Overriding functions with macros is legal in C but a lot of software is not prepared for it. Use the extern inline method to achieve the same result.
2015-03-11	Put include guards in the reserved namespace	Trutz Behn
	fortify-headers is considered part of the implementation.
2015-03-11	Ignore C++ for now	sin
	It is not legal to override standard functions using macros in C++. We may have to revisit this in the future.
2015-03-11	Add ifdef guards for C++ code	sin

2015-02-28	Remove redundant checks	sin
	We can never have an array of more than SIZE_MAX/2/sizeof(gid_t) gid_t's.
2015-02-28	Add readlink() and readlinkat() checks	sin

2015-02-28	Add ttyname_r() check	sin

2015-02-28	Add getgroups() check	sin
	Since getgroups() will never write more than NGROUPS_MAX entries we might as well cap len to that value. The following should probably not trap the program: gid_t set[NGROUPS_MAX]; getgroups(NGROUPS_MAX + 1, set);
2015-02-28	Add getdomainname() check	sin

2015-02-25	Add getlogin_r() check	sin

2015-02-24	Add write() check	sin

2015-02-24	Remove compile time checks	sin
	These can produce false positives. Given that we support fortify source level 1 we shouldn't break valid code.
2015-02-23	Add gethostname() checks	sin

2015-02-22	Remove header license comments	sin

2015-02-05	Add getcwd() checks	sin

2015-02-05	Add confstr() checks	sin

2015-02-04	Remember to #undef __errordecl	sin
	Thanks zhasha for spotting this.
2015-02-04	Style fix	sin

2015-01-30	Remove pwrite/write	sin

2015-01-30	Add pread() and pwrite() checks	sin

2015-01-29	Style fix	sin

2015-01-29	Add read()/write() checks	sin