{"id":140018,"date":"2025-08-04T11:12:07","date_gmt":"2025-08-04T09:12:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-clang-namereny-dobavit-rezhim-usilennoj-bezopasnosti"},"modified":"2025-08-04T11:12:07","modified_gmt":"2025-08-04T09:12:07","slug":"v-clang-namereny-dobavit-rezhim-usilennoj-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-clang-namereny-dobavit-rezhim-usilennoj-bezopasnosti","title":{"rendered":"Clang ka n\u00eb plan t\u00eb shtoj\u00eb nj\u00eb mod t\u00eb forcuar t\u00eb siguris\u00eb.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Aaron Ballman, kryetari i zhvillimit t\u00eb kompilatorit Clang dhe an\u00ebtar i ekipeve t\u00eb zhvillimit t\u00eb standardeve WG21 (C++) dhe WG14 (C), filloi diskutimin p\u00ebr shtimin n\u00eb kompilatorin Clang t\u00eb nj\u00eb mode t\u00eb forcuar t\u00eb siguris\u00eb. Ky mod do t\u00eb lejoj\u00eb aktivizimin e menj\u00ebhersh\u00ebm t\u00eb nj\u00eb grupi opsionesh p\u00ebr forcimin e mbrojtjes, n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me flamurin e shtuar n\u00eb GCC 14 \u2018-fhardened\u2019, i cili aktivizon opsionet \u2018-D_FORTIFY_SOURCE=3 -D_GLIBCXX_ASSERTIONS -ftrivial-auto-var-init=zero -fPIE -pie -Wl,-z,relro,-z,now -fstack-protector-strong -fstack-clash-protection -fcf-protection=full\u2019. <\/p>\n

Vlen t\u00eb theksohet se aktualisht po punohet p\u00ebr shtimin e mund\u00ebsive p\u00ebr forcimin e siguris\u00eb n\u00eb standardet C dhe C++, por ky proces nuk \u00ebsht\u00eb i shpejt\u00eb, duke pasur parasysh se n\u00eb Clang tashm\u00eb jan\u00eb t\u00eb disponueshme opsione t\u00eb ve\u00e7anta me implementim t\u00eb mekanizmave t\u00eb tjer\u00eb t\u00eb mbrojtjes. Metodat e implementuara t\u00eb mbrojtjes shpesh shkaktojn\u00eb moskoordinime me kodin ekzistues ose shkelje t\u00eb ABI, q\u00eb nuk e lejon aktivizimin e tyre si parazgjedhje. P\u00ebrve\u00e7 k\u00ebsaj, k\u00ebto opsione jan\u00eb t\u00eb shp\u00ebrndara (flamuj p\u00ebr menaxhimin e kompajlimit, flamuj t\u00eb gjenerimit t\u00eb instruksioneve makinerike t\u00eb lidhura me arkitektur\u00ebn hardware, paralajm\u00ebrime, moda diagnostike, makros), t\u00eb dokumentuara dob\u00ebt dhe shpesh i shp\u00ebtojn\u00eb v\u00ebmendjes s\u00eb zhvilluesve. <\/p>\n

Konfigurimi i nj\u00ebjt\u00eb unifikon aktivizimin e opsioneve t\u00eb lidhura me sigurin\u00eb dhe e thjeshton aplikimin e tyre. Po shqyrtohen disa mund\u00ebsi p\u00ebr aktivizimin e modeve t\u00eb forcimeve t\u00eb siguris\u00eb, p\u00ebr shembull, diskutimi po b\u00ebhet p\u00ebr aktivizimin p\u00ebrmes flamurit \u2018-fhardened\u2019, grupit t\u00eb cil\u00ebsimeve \u2018--config=hardened\u2019, nj\u00eb drejtues t\u00eb ve\u00e7ant\u00eb (clang --driver-mode) ose opsioneve t\u00eb ndara \u2018-fhardened, -mhardened dhe -Whardened\u2019, t\u00eb lidhura me kompilimin, gjenerimin e kodit dhe daljen e paralajm\u00ebrimeve. Moda mund t\u00eb mbuloj\u00eb: <\/p>\n