Kees Cook be58f71037 fortify: Add compile-time FORTIFY_SOURCE tests
While the run-time testing of FORTIFY_SOURCE is already present in
LKDTM, there is no testing of the expected compile-time detections. In
preparation for correctly supporting FORTIFY_SOURCE under Clang, adding
additional FORTIFY_SOURCE defenses, and making sure FORTIFY_SOURCE
doesn't silently regress with GCC, introduce a build-time test suite that
checks each expected compile-time failure condition.

As this is relatively backwards from standard build rules in the
sense that a successful test is actually a compile _failure_, create
a wrapper script to check for the correct errors, and wire it up as
a dummy dependency to lib/string.o, collecting the results into a log
file artifact.

Signed-off-by: Kees Cook <keescook@chromium.org>
2021-10-18 12:28:52 -07:00
..
2021-09-03 15:33:47 -07:00
2021-07-15 22:31:10 +02:00
2021-04-26 08:38:10 -07:00
2020-10-22 13:13:57 -07:00
2021-09-03 15:33:47 -07:00
2021-02-26 09:41:05 -08:00
2021-05-02 00:43:35 +09:00
2020-12-08 23:30:04 +09:00
2021-09-10 23:59:44 -07:00
2020-12-08 23:30:04 +09:00
2021-05-02 00:43:35 +09:00
2021-05-03 17:23:06 -06:00