wenshelx 265499c2f2 security: fortify source and format string check ...

"-O2 -D_FORTIFY_SOURCE=2":
GCC C-Compiler can analyze the source code to be compiled and detect
certain insecure sections, that might create a security problem. The
compiler will replace the insecure function calls with special hardened
code that will perform extra runtime checks while the process is
executed.
"-Wformat -Wformat-security":
It warns about calls to "printf" and "scanf" functions where the format
string is not a string literal and there are no format arguments, as in
"printf (foo);". This may be a security hole if the format string came
from untrusted input and contains %n.

Tracked-On: 224003
Signed-off-by: wenshelx <wenshengx.wang@intel.com>

2018-05-15 17:19:35 +08:00

devicemodel

Ignore length of resource for PCI ROM request

2018-05-15 17:19:35 +08:00

doc

doc: filter known issues

2018-05-15 17:19:35 +08:00

hypervisor

security: fortify source and format string check

2018-05-15 17:19:35 +08:00

Description

Project ACRN hypervisor

BSD-3-Clause 245 MiB

Languages

C 71.5%

Python 17.9%

JavaScript 2.7%

Vue 2%

XSLT 1.5%

Other 4.4%