$ cat test.c
#include <stdio.h>
int main(void)
{
char x[3];
return 0;
}
$ gcc -o test test.c -fno-stack-protector -fstack-protector-all -Wstack-protector
$ hardening-check test
test:
Position Independent Executable: no, normal executable!
Stack protected: yes <-- SUCCESS!!!
Fortify Source functions: no, not found!
Read-only relocations: yes
Immediate binding: no, not found!
Whereas..
$ gcc -o test test.c -fstack-protector-all -Wstack-protector
test.c: In function ‘main’:
test.c:3: warning: not protecting function: no buffer at least 8 bytes long
$ hardening-check test
test:
Position Independent Executable: no, normal executable!
Stack protected: no, not found! <-- You get a warning and NO success!!!
Fortify Source functions: no, not found!
Read-only relocations: yes
Immediate binding: no, not found!
Think it's a gcc bug, -fstack-protector-all should oversubscribe default enabled -fstack-protector.