mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-13 00:00:00 -04:00
ANDROID: gki_defconfig: enable heap and stack initialization.
This patch enables CONFIG_INIT_STACK_ALL=y and CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y, effectively turning on stack and heap initialization in GKI kernels. Doing so will help us mitigate information leaks and make code that depends on uninitialized memory execute deterministically. We'll also get coverage for the initialization features on the existing kernel tests. Bug: 144999193 Change-Id: I40ad526b2e595c84b122b0308d967a3874564252 Signed-off-by: Alexander Potapenko <glider@google.com>
This commit is contained in:
parent
d5581a7f19
commit
ace4db9a40
2 changed files with 4 additions and 0 deletions
|
|
@ -464,6 +464,8 @@ CONFIG_SECURITY_NETWORK=y
|
|||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_FORTIFY_SOURCE=y
|
||||
CONFIG_SECURITY_SELINUX=y
|
||||
CONFIG_INIT_STACK_ALL=y
|
||||
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
|
||||
CONFIG_CRYPTO_ADIANTUM=y
|
||||
CONFIG_CRYPTO_MD4=y
|
||||
CONFIG_CRYPTO_LZ4=y
|
||||
|
|
|
|||
|
|
@ -400,6 +400,8 @@ CONFIG_SECURITY_NETWORK=y
|
|||
CONFIG_HARDENED_USERCOPY=y
|
||||
CONFIG_FORTIFY_SOURCE=y
|
||||
CONFIG_SECURITY_SELINUX=y
|
||||
CONFIG_INIT_STACK_ALL=y
|
||||
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
|
||||
CONFIG_CRYPTO_ADIANTUM=y
|
||||
CONFIG_CRYPTO_SHA256_SSSE3=y
|
||||
CONFIG_CRYPTO_AES_NI_INTEL=y
|
||||
|
|
|
|||
Loading…
Reference in a new issue