I wonder if we could get a nice short command-line option
for recommended safety/security related flags.

We have -Ox for optimization and -Wall for a useful set
of recommended warnings.

I am thinking about options such as 

-ftrapv
-fsanitize=undefined -fsanitize-undefined-trap-on-error
-fstack-protector
-D_FORTIFY_SOURCE=2
-Werror=format-security

etc.  We would need to make a selection based on
various tradeoffs, but this is not different
to -Wall or -O.


Martin

Reply via email to