Hi Florian, Thanks very much for your reply. -D_FORTIFY_SOURCE=1 is just during compile time and -D_FORTIFY_SOURCE=2 also has runtime checks for variable length? Thanks, Reinoud On Wed, Mar 2, 2022, 2:22 AM Florian Weimer <fweimer@xxxxxxxxxx> wrote: > * Reinoud Koornstra via Gcc-help: > > > Is it possible to compile with -stack-protector-strong and > > FORTIFY_SOURCE=1 or =2? Or should both be used exclusively from > > another? Both check for similar things. > > They complement each other. I think most distributions use both these > days (-fstack-protector-strong and -D_FORTIFY_SOURCE=2). > > Thanks, > Florian > >
