1 files changed, 14 insertions, 0 deletions

diff --git a/arch/sh/Kconfig b/arch/sh/Kconfig
index ed2419f7afe..98405fa24e8 100644
--- a/arch/sh/Kconfig
+++ b/arch/sh/Kconfig
@@ -695,6 +695,20 @@ config SECCOMP
 
           If unsure, say N.
 
+config CC_STACKPROTECTOR
+        bool "Enable -fstack-protector buffer overflow detection (EXPERIMENTAL)"
+        depends on SUPERH32 && EXPERIMENTAL
+        help
+          This option turns on the -fstack-protector GCC feature. This
+          feature puts, at the beginning of functions, a canary value on
+          the stack just before the return address, and validates
+          the value just before actually returning.  Stack based buffer
+          overflows (that need to overwrite this return address) now also
+          overwrite the canary, which gets detected and the attack is then
+          neutralized via a kernel panic.
+
+          This feature requires gcc version 4.2 or above.
+
 config SMP
         bool "Symmetric multi-processing support"
         depends on SYS_SUPPORTS_SMP