fortify-headers - Standalone portable header-based implementation of FORTIFY

Age	Commit message (Collapse)	Author
2015-03-04	Add wcrtomb(), wcscat() and wcscpy() checks	sin

2015-03-03	Style fix	sin

2015-03-03	Add mbstowcs() check	sin

2015-03-03	Add mbsnrtowcs() and mbsrtowcs() checks	sin

2015-03-03	Add wmemcpy() and wmemmove() checks	sin

2015-03-03	Add wmemset() check	sin

2015-03-03	Fix signed/unsigned warning	sin

2015-03-03	Remove gcc attribute decoration	sin

2015-03-03	Don't trap on error for vsprintf() and friends	sin

2015-03-03	Add fgetws() check	sin

2015-03-03	Add ppoll() check	sin

2015-03-01	Add fwrite() check	sin

2015-03-01	Add fread() check	sin

2015-03-01	Add vsprintf() check	sin

2015-03-01	Fix potential signed/unsigned warning	sin

2015-03-01	Add sprintf() check	sin

2015-02-28	Remove redundant checks	sin
	We can never have an array of more than SIZE_MAX/2/sizeof(gid_t) gid_t's.
2015-02-28	Minor style fix	sin

2015-02-28	Add sendto() check	sin

2015-02-28	Add readlink() and readlinkat() checks	sin

2015-02-28	Style fix	sin

2015-02-28	Use __typeof__(sizeof 0) trickery	sin
	We cannot pull stddef.h and since fortify already relies on GCC features we can use the above typeof trick to get a usable size_t.
2015-02-28	__fortify_realpath() should trap if PATH_MAX is not defined	sin
	This is currently done only if the pointer is non-NULL.
2015-02-28	Add ttyname_r() check	sin

2015-02-28	Don't include stddef.h from poll.h	sin

2015-02-28	Add poll() check	sin
	Not sure if including stddef.h from poll.h is acceptable.
2015-02-28	Add getgroups() check	sin
	Since getgroups() will never write more than NGROUPS_MAX entries we might as well cap len to that value. The following should probably not trap the program: gid_t set[NGROUPS_MAX]; getgroups(NGROUPS_MAX + 1, set);
2015-02-28	Add getdomainname() check	sin

2015-02-25	Clarify comment a bit	sin

2015-02-25	Add getlogin_r() check	sin

2015-02-24	Add send() check	sin

2015-02-24	Add write() check	sin

2015-02-24	Add realpath() check	sin

2015-02-24	Remove compile time checks	sin
	These can produce false positives. Given that we support fortify source level 1 we shouldn't break valid code.
2015-02-23	Add gethostname() checks	sin

2015-02-22	Remove header license comments	sin

2015-02-05	Add getcwd() checks	sin

2015-02-05	Add confstr() checks	sin

2015-02-04	Remember to #undef __errordecl	sin
	Thanks zhasha for spotting this.
2015-02-04	Style fix	sin

2015-02-04	Add recvfrom() checks	sin

2015-01-30	Add recv() checks	sin

2015-01-30	Use consistent naming convention	sin

2015-01-30	Remove pwrite/write	sin

2015-01-30	Remove __restrict	sin

2015-01-30	Add FD_{CLR,SET} checks	sin

2015-01-30	Add pread() and pwrite() checks	sin

2015-01-29	Fix typo	sin

2015-01-29	Style fix	sin

2015-01-29	Add read()/write() checks	sin