Consider -Wstringop-overflow, -Wno-stringop-overread, and -Wno-stringop-truncation for C and C++ Compiler Hardening Guide

[thomasnyman]

The -Wstringop-overflow, -Wno-stringop-overread, and -Wno-stringop-truncation options warn for code that can be statically determined to cause buffer overflows or memory overruns, truncate the copied string or leave the destination unchanged.

-Wstringop-overflow, in particular, was briefly enabled in Linux 6.8 but ultimately disabled due non-x86_64 build issues (without exact cause).

These options also benefit from GCC access attribute annotations which may make them worth considering.

Resources:

• https://gcc.gnu.org/onlinedocs/gcc/Warning-Options.html#index-Wstringop-overflow
• https://www.phoronix.com/news/Linux-6.8-Wstringop-overflow
• https://www.phoronix.com/news/Linux-Drop-GCC--Wstringop-of