Compiler Options Hardening for C and C++ - Georg Kunz, Ericsson
Compiler Options Hardening for C and C++ - Georg Kunz, Ericsson
C and C++ programs are susceptible to memory-safety issues that account for a significant portion of vulnerabilities. Transitioning from C and C++ to memory-safe languages is an effective approach of mitigating memory-safety issues. However, with the ubiquitous use of C and C++ in embedded devices and industrial controls, the chances of entirely replacing C and C++ are small. Thus, techniques for improving the security of C and C++ programs should be applied where a transition to memory-safe languages is not yet possible. Modern C and C++ compilers such as GCC or LLVM implement a wide range of mechanisms for the detection, mitigation and prevention of many memory-safety issues. The OpenSSF develops a Compiler Options Hardening Guide for C and C++ that helps developers make informed choices regarding compiler options to harden their software against prevalent software defects. In this talk, Georg will give an introduction to the OpenSSF Compiler Options Hardening Guide for C and C++. He will talk about its current structure and future extensions, particularly inviting feedback from the community to explore future areas of collaboration.