- enhancement: Options in compiler set settings, to generate protection code for stack smashing attack. （Enable for Debug settings by default)

- enhancement: Options in compiler set settings, to enable address sanitizer. Not available in windows.（Enable for Debug settings by default)

NEWS.md

@@ -8,7 +8,9 @@ Red Panda C++ Version 2.18
   - enhancement: Warn user and stop compile if project has missing files.
   - enhancement: Warn user when exit and save settings failed.
   - change: Remove compiler set options that's rarely used.
-  - enhancement: Options in compiler set settings, to generate syntax error for large stack objects.
+  - enhancement: Options in compiler set settings, to generate syntax error for large stack objects. （Enable for Debug settings by default)
+  - enhancement: Options in compiler set settings, to generate protection code for stack smashing attack. （Enable for Debug settings by default)
+  - enhancement: Options in compiler set settings, to enable address sanitizer. Not available in windows.（Enable for Debug settings by default)
 
 Red Panda C++ Version 2.17
 

RedPandaIDE/compiler/compilerinfo.cpp

@@ -151,17 +151,29 @@ void CompilerInfo::prepareCompilerOptions()
 
     addOption(CC_CMD_OPT_DEBUG_INFO, QObject::tr("Generate debugging information (-g3)"), groupName, true, true, false, "-g3");
     addOption(CC_CMD_OPT_PROFILE_INFO, QObject::tr("Generate profiling info for analysis (-pg)"), groupName, true, true, true, "-pg");
+    addOption(CC_CMD_OPT_SYNTAX_ONLY, QObject::tr("Only check the code for syntax errors (-fsyntax-only)"), groupName, true, true, false, "-fsyntax-only");
 
     // Warnings
     groupName = QObject::tr("Warnings");
     addOption(CC_CMD_OPT_INHIBIT_ALL_WARNING, QObject::tr("Inhibit all warning messages (-w)"), groupName, true, true, false, "-w");
     addOption(CC_CMD_OPT_WARNING_ALL,QObject::tr("Show most warnings (-Wall)"), groupName, true, true, false, "-Wall");
     addOption(CC_CMD_OPT_WARNING_EXTRA,QObject::tr("Show some more warnings (-Wextra)"), groupName, true, true, false, "-Wextra");
-    addOption(CC_CMD_OPT_CHECK_ISO_CONFORMANCE, QObject::tr("Check ISO C/C++/C++0x conformance (-pedantic)"), groupName, true, true, false, "-pedantic");
+    addOption(CC_CMD_OPT_CHECK_ISO_CONFORMANCE, QObject::tr("Check ISO C/C++ conformance (-pedantic)"), groupName, true, true, false, "-pedantic");
-    addOption(CC_CMD_OPT_SYNTAX_ONLY, QObject::tr("Only check the code for syntax errors (-fsyntax-only)"), groupName, true, true, false, "-fsyntax-only");
     addOption(CC_CMD_OPT_WARNING_AS_ERROR, QObject::tr("Make all warnings into errors (-Werror)"), groupName, true, true, false, "-Werror");
     addOption(CC_CMD_OPT_ABORT_ON_ERROR , QObject::tr("Abort compilation on first error (-Wfatal-errors)"), groupName, true, true, false, "-Wfatal-errors");
-
+    sl.clear();
+    sl.append(QPair<QString,QString>("Normal"," "));
+    sl.append(QPair<QString,QString>("Strong","-strong"));
+    sl.append(QPair<QString,QString>("All","-all"));
+    addOption(CC_CMD_OPT_STACK_PROTECTOR , QObject::tr("Check for stack smashing attacks (-fstack-protector)"), groupName, false, false, true, "-fstack-protector",sl);
+#if defined(Q_OS_LINUX) || defined(Q_OS_MACOS)
+    sl.clear();
+    sl.append(QPair<QString,QString>("Address","address"));
+    sl.append(QPair<QString,QString>("Thread","thread"));
+    sl.append(QPair<QString,QString>("Leak","leak"));
+    sl.append(QPair<QString,QString>("Undefined","undefined"));
+    addOption(CC_CMD_OPT_ADDRESS_SANITIZER , QObject::tr("Enable Sanitizer (-fsanitize=)"), groupName, true, true, true, "-fsanitize=",sl);
+#endif
 
     // Output
     //groupName = QObject::tr("Output");

RedPandaIDE/compiler/compilerinfo.h

@@ -37,6 +37,8 @@
 #define LINK_CMD_OPT_NO_CONSOLE "link_cmd_opt_no_console"
 #define LINK_CMD_OPT_STRIP_EXE "link_cmd_opt_strip_exe"
 #define CC_CMD_OPT_DEBUG_INFO "cc_cmd_opt_debug_info"
+#define CC_CMD_OPT_ADDRESS_SANITIZER "cc_cmd_opt_address_sanitizer"
+#define CC_CMD_OPT_STACK_PROTECTOR "cc_cmd_opt_stack_protector"
 
 #define CC_CMD_OPT_VERBOSE_ASM "cc_cmd_opt_verbose_asm"
 #define CC_CMD_OPT_ONLY_GEN_ASM_CODE "cc_cmd_opt_only_gen_asm_code"

RedPandaIDE/settings.cpp

@@ -2768,12 +2768,15 @@ static void setDebugOptions(Settings::PCompilerSet pSet, bool enableAsan = false
     pSet->setCompileOption(CC_CMD_OPT_WARNING_ALL, COMPILER_OPTION_ON);
     //pSet->setCompileOption(CC_CMD_OPT_WARNING_EXTRA, COMPILER_OPTION_ON);
     pSet->setCompileOption(CC_CMD_OPT_USE_PIPE, COMPILER_OPTION_ON);
+
     if (enableAsan) {
-        pSet->setCustomCompileParams("-fsanitize=address");
+        pSet->setCompileOption(CC_CMD_OPT_ADDRESS_SANITIZER, "address");
-        pSet->setUseCustomCompileParams(true);
+//        pSet->setCustomCompileParams("-fsanitize=address");
-        pSet->setCustomLinkParams("-fsanitize=address");
+//        pSet->setUseCustomCompileParams(true);
-        pSet->setUseCustomLinkParams(true);
+//        pSet->setCustomLinkParams("-fsanitize=address");
+//        pSet->setUseCustomLinkParams(true);
     }
+    pSet->setCompileOption(CC_CMD_OPT_STACK_PROTECTOR, "-strong");
     pSet->setStaticLink(false);
 
     pSet->setMaxObjectSize(2); //default stack size of gcc is 2MB

RedPandaIDE/translations/RedPandaIDE_pt_BR.ts

@@ -6503,7 +6503,7 @@
     </message>
     <message>
         <source>Check ISO C/C++/C++0x conformance (-pedantic)</source>
-        <translation>Verificar conformidade ISO C/C++/C++0x (-pedantic)</translation>
+        <translation type="vanished">Verificar conformidade ISO C/C++/C++0x (-pedantic)</translation>
     </message>
     <message>
         <source>Only check the code for syntax errors (-fsyntax-only)</source>
@@ -6717,6 +6717,18 @@
         <source>Lua files</source>
         <translation type="unfinished"></translation>
     </message>
+    <message>
+        <source>Check for stack smashing attacks (-fstack-protector)</source>
+        <translation type="unfinished"></translation>
+    </message>
+    <message>
+        <source>Check ISO C/C++ conformance (-pedantic)</source>
+        <translation type="unfinished"></translation>
+    </message>
+    <message>
+        <source>Enable Sanitizer (-fsanitize=)</source>
+        <translation type="unfinished"></translation>
+    </message>
 </context>
 <context>
     <name>RegisterModel</name>

RedPandaIDE/translations/RedPandaIDE_zh_CN.ts

@@ -762,7 +762,7 @@ p, li { white-space: pre-wrap; }
     <message>
         <location filename="../settingsdialog/compilersetoptionwidget.ui" line="192"/>
         <source>Syntax error for objects larger than</source>
-        <translation type="unfinished">当变量占用栈空间大于此值时报错</translation>
+        <translation>当变量占用栈空间大于此值时报错</translation>
     </message>
     <message>
         <location filename="../settingsdialog/compilersetoptionwidget.ui" line="322"/>
@@ -8537,7 +8537,7 @@ Are you really want to continue?</oldsource>
         <translation>生成调试信息(-g3)</translation>
     </message>
     <message>
-        <location filename="../settings.cpp" line="2990"/>
+        <location filename="../settings.cpp" line="2992"/>
         <source>Would you like Red Panda C++ to search for compilers in PATH?</source>
         <translation>您同意小熊猫C++在PATH路径中寻找gcc编译器吗？</translation>
     </message>
@@ -8547,7 +8547,7 @@ Are you really want to continue?</oldsource>
         <translation>生成性能分析信息(-pg)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="156"/>
+        <location filename="../compiler/compilerinfo.cpp" line="165"/>
         <source>Warnings</source>
         <translation>代码警告</translation>
     </message>
@@ -8566,42 +8566,60 @@ Are you really want to continue?</oldsource>
         <translation>C语言标准 (-std)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="157"/>
+        <source>Enable AddressSanitizer (-fsanitize=address)</source>
+        <translation type="obsolete">启用</translation>
+    </message>
+    <message>
+        <location filename="../compiler/compilerinfo.cpp" line="154"/>
+        <source>Check for stack smashing attacks (-fstack-protector)</source>
+        <translation>检查栈溢出(stack smashing)错误 (-fstack-protector)</translation>
+    </message>
+    <message>
+        <location filename="../compiler/compilerinfo.cpp" line="161"/>
+        <source>Enable Sanitizer (-fsanitize=)</source>
+        <translation>启用地址消毒(-fsanitize=)</translation>
+    </message>
+    <message>
+        <location filename="../compiler/compilerinfo.cpp" line="166"/>
         <source>Inhibit all warning messages (-w)</source>
         <translation>忽略所有警告信息(-w)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="158"/>
+        <location filename="../compiler/compilerinfo.cpp" line="167"/>
         <source>Show most warnings (-Wall)</source>
         <translation>启用常见问题警告(-Wall)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="159"/>
+        <location filename="../compiler/compilerinfo.cpp" line="168"/>
         <source>Show some more warnings (-Wextra)</source>
         <translation>启用更多问题警告(-Wextra)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="160"/>
+        <location filename="../compiler/compilerinfo.cpp" line="169"/>
-        <source>Check ISO C/C++/C++0x conformance (-pedantic)</source>
+        <source>Check ISO C/C++ conformance (-pedantic)</source>
-        <translation>检查ISO C/C++/C++0x语法一致性(-pedantic)</translation>
+        <translation>检查是否严格遵守ISO C/C++标准</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="161"/>
+        <source>Check ISO C/C++/C++0x conformance (-pedantic)</source>
+        <translation type="vanished">检查ISO C/C++/C++0x语法一致性(-pedantic)</translation>
+    </message>
+    <message>
+        <location filename="../compiler/compilerinfo.cpp" line="170"/>
         <source>Only check the code for syntax errors (-fsyntax-only)</source>
         <translation>只进行语法检查（不编译）(-fsyntax-only)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="162"/>
+        <location filename="../compiler/compilerinfo.cpp" line="171"/>
         <source>Make all warnings into errors (-Werror)</source>
         <translation>将警告作为错误处理(-Werror)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="163"/>
+        <location filename="../compiler/compilerinfo.cpp" line="172"/>
         <source>Abort compilation on first error (-Wfatal-errors)</source>
         <translation>遇到第一个错误后立即中止编译(-Wfatal-errors)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="173"/>
+        <location filename="../compiler/compilerinfo.cpp" line="182"/>
         <source>Linker</source>
         <translation>链接器</translation>
     </message>
@@ -8610,17 +8628,17 @@ Are you really want to continue?</oldsource>
         <translation type="vanished">链接Objective-C程序 (-lobjc)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="176"/>
+        <location filename="../compiler/compilerinfo.cpp" line="185"/>
         <source>Do not use standard system libraries (-nostdlib)</source>
         <translation>不使用标准库和系统启动文件(-nostdlib)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="177"/>
+        <location filename="../compiler/compilerinfo.cpp" line="186"/>
         <source>Do not create a console window (-mwindows)</source>
         <translation>不产生控制台窗口(-mwindows)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="178"/>
+        <location filename="../compiler/compilerinfo.cpp" line="187"/>
         <source>Strip executable (-s)</source>
         <translation>剥除附加信息(-s)</translation>
     </message>
@@ -8641,7 +8659,7 @@ Are you really want to continue?</oldsource>
         <translation type="vanished">仅预处理（-E)</translation>
     </message>
     <message>
-        <location filename="../compiler/compilerinfo.cpp" line="174"/>
+        <location filename="../compiler/compilerinfo.cpp" line="183"/>
         <source>Use pipes instead of temporary files during compilation (-pipe)</source>
         <translation>编译时使用管道而不是临时文件(-pipe)</translation>
     </message>
@@ -8650,7 +8668,7 @@ Are you really want to continue?</oldsource>
         <translation type="vanished">只生成汇编代码(-S)</translation>
     </message>
     <message>
-        <location filename="../settings.cpp" line="2992"/>
+        <location filename="../settings.cpp" line="2994"/>
         <source>Confirm</source>
         <translation>确认</translation>
     </message>
@@ -8671,13 +8689,13 @@ Are you really want to continue?</oldsource>
         <translation type="vanished">如果仍然保留这些设置，可能会导致编译错误。&lt;br /&gt;&lt;br /&gt;请选择“是”，除非您清楚的知道选择“否”的后果，</translation>
     </message>
     <message>
-        <location filename="../settings.cpp" line="2982"/>
+        <location filename="../settings.cpp" line="2984"/>
-        <location filename="../settings.cpp" line="2988"/>
+        <location filename="../settings.cpp" line="2990"/>
         <source>Compiler set not configuared.</source>
         <translation>未配置编译器设置。</translation>
     </message>
     <message>
-        <location filename="../settings.cpp" line="2984"/>
+        <location filename="../settings.cpp" line="2986"/>
         <source>Would you like Red Panda C++ to search for compilers in the following locations: &lt;BR /&gt;&apos;%1&apos;&lt;BR /&gt;&apos;%2&apos;? </source>
         <translation>您需要小熊猫C++在下列位置搜索编译器吗：&lt;br /&gt;%1&lt;br /&gt;%2</translation>
     </message>

RedPandaIDE/translations/RedPandaIDE_zh_TW.ts

@@ -6114,10 +6114,6 @@
         <source>Show some more warnings (-Wextra)</source>
         <translation type="unfinished"></translation>
     </message>
-    <message>
-        <source>Check ISO C/C++/C++0x conformance (-pedantic)</source>
-        <translation type="unfinished"></translation>
-    </message>
     <message>
         <source>Only check the code for syntax errors (-fsyntax-only)</source>
         <translation type="unfinished"></translation>
@@ -6282,6 +6278,18 @@
         <source>Lua files</source>
         <translation type="unfinished"></translation>
     </message>
+    <message>
+        <source>Check for stack smashing attacks (-fstack-protector)</source>
+        <translation type="unfinished"></translation>
+    </message>
+    <message>
+        <source>Check ISO C/C++ conformance (-pedantic)</source>
+        <translation type="unfinished"></translation>
+    </message>
+    <message>
+        <source>Enable Sanitizer (-fsanitize=)</source>
+        <translation type="unfinished"></translation>
+    </message>
 </context>
 <context>
     <name>RegisterModel</name>