--- zzzz-none-000/linux-4.9.279/arch/Kconfig 2021-08-08 06:38:54.000000000 +0000 +++ puma7-atom-6591-750/linux-4.9.279/arch/Kconfig 2023-02-08 11:43:42.000000000 +0000 @@ -471,6 +471,15 @@ endchoice +config CC_STACKPROTECTOR_BUG_ON_FAIL + bool "Detection of stack-corruption will trigger BUG()" + default n + depends on CC_STACKPROTECTOR + help + Detection of stack-corruption will trigger BUG(). + Depending on the implementation of BUG(), further info + (backtrace, registerdump, stacktrace) possible. + config THIN_ARCHIVES bool help @@ -772,4 +781,13 @@ the stack to map directly to the KASAN shadow map using a formula that is incorrect if the stack is in vmalloc space. +config REFCOUNT_FULL + bool "Perform full reference count validation at the expense of speed" + help + Enabling this switches the refcounting infrastructure from a fast + unchecked atomic_t implementation to a fully state checked + implementation, which can be (slightly) slower but provides protections + against various use-after-free conditions that can be used in + security flaw exploits. + source "kernel/gcov/Kconfig"