SafeStack documentation improvements
authorPeter Collingbourne <peter@pcc.me.uk>
Tue, 23 Jun 2015 22:24:45 +0000 (22:24 +0000)
committerPeter Collingbourne <peter@pcc.me.uk>
Tue, 23 Jun 2015 22:24:45 +0000 (22:24 +0000)
commit7ce9199a57fb59d1a60181c72d496520495b3471
tree1bde5b4a5734236f88bda555c35672f1de90147f
parent86dd4cf5a1a3e39c1dc2c59982013a7259285689
SafeStack documentation improvements

This patch makes the following improvements to the SafeStack documentation:

Explicitly states the security guarantees of the SafeStack
Clarifies which of the security guarantees are probabilistic
Re-orders security limitations to put the most severe ones first
Explains how `__attribute__((no_sanitize("safe-stack")))` works and how to use it safely
Explains that SafeStack should be combined with a forward-edge protection mechanism, such as CPI, IFCC or others
Multiple readability and stylistic improvements

Patch by Volodymyr Kuznetsov!

Differential Revision: http://reviews.llvm.org/D10598

llvm-svn: 240472
clang/docs/SafeStack.rst