Typos that omit security features and how to test for them
blog.trailofbits.com | blog | #secure-coding | #c | #cpp | #compiler | #mitigations | #fortify-source | #build-security | #auditing | #typos | #build-hardening
Summary
An audit found a typo that silently disabled _FORTIFY_SOURCE; the team found and fixed twenty similar C/C++ bugs on GitHub and shows how to test builds for this missed mitigation.
- Published
- Collected
--- id: 1673 title: "Typos that omit security features and how to test for them" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2023/04/20/typos-that-omit-security-features-and-how-to-test-for-them/" published_at: "2023-04-20T11:00:08Z" tags: ["secure-coding", "c", "cpp", "compiler", "mitigations", "fortify-source", "build-security", "auditing", "typos", "build-hardening"] phying_url: "https://phying.com/item/1673" lang: en --- # Typos that omit security features and how to test for them ## Summary An audit found a typo that silently disabled _FORTIFY_SOURCE; the team found and fixed twenty similar C/C++ bugs on GitHub and shows how to test builds for this missed mitigation. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2023-04-20T11:00:08Z - **Original:** https://blog.trailofbits.com/2023/04/20/typos-that-omit-security-features-and-how-to-test-for-them/ - **Phying News:** https://phying.com/item/1673