patacongo commented on code in PR #9499:
URL: https://github.com/apache/nuttx/pull/9499#discussion_r1228392480


##########
Kconfig:
##########
@@ -1904,7 +1904,7 @@ config HEAP_COLORATION
 
 config DEBUG_SYMBOLS
        bool "Generate Debug Symbols"
-       default n
+       default y

Review Comment:
   > it's tradeoff between the easy use and the more secure.
   
   I would always opt for security over convenience.  The consequence of 
security problems is much worse than any invconvience since it could result in 
the exposure of intellectual property.,
   
   You could make the default setting for CONFIG_DEBUG_SYMBOLS be "n" normally, 
but "y" if CONFIG_DEBUG_FEATURES is selected.  That default would probably be 
correct most of the time and, when it is not, it can still be overridden in the 
configuration.
   
   A more hardline approach would be to make CONFIG_DEBUG_SYMBOLS  depend on 
CONFIG_DEBUG_FEATURES   That would probably not be wise.
   
   In order for GDB to be usable, it needs not only symbols but usually also 
disabling optimization.  Should that have the same default setting?
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to