Repository navigation

Harden the vendored libraries and the runtime's stack - #3442

Merged

ctate merged 19 commits into

mainfrom

train/security-2

Nov 8, 2026

Merged

Harden the vendored libraries and the runtime's stack#3442
ctate merged 19 commits into
mainfrom
train/security-2

Commits on Oct 18, 2026
- Harden the C runtime packs with compiler protections
  
  cramforce
  and
  claude
  committed
  f04c9de
- Keep runtime-pack hardening portable and free of source paths
  
  cramforce
  and
  claude
  committed
  2b43e6b
Commits on Oct 27, 2026
- Merge origin/main into harden/runtime-cflags
  
  cramforce
  and
  claude
  committed
  e9495b9
- Keep the stack protector out of the math IFUNC resolvers
  
  cramforce
  and
  claude
  committed
  84756f9
Commits on Oct 28, 2026
- Merge origin/main into harden/runtime-cflags
  
  cramforce
  and
  claude
  committed
  31c2dc3
- Merge origin/main into harden/runtime-cflags
  
  cramforce
  and
  claude
  committed
  a86b8da
- Refresh the runtime profile for the hardened runtime
  cramforce
  committed
  c890da8
Commits on Oct 30, 2026
- Merge origin/main into harden/runtime-cflags
  
  cramforce
  and
  claude
  committed
  5964734
- Merge remote-tracking branch 'origin/main' into merge/1197
  cramforce
  committed
  f10f54b
- Merge origin/main into harden/runtime-cflags
  
  cramforce
  and
  claude
  committed
  763cd7f
- Regenerate the linux-x64-gnu runtime profile for the hardened runtime
  
  cramforce
  and
  claude
  committed
  9a05aba
Commits on Nov 7, 2026
- Merge main
  ctate
  committed
  513fc88
Commits on Nov 8, 2026
- Merge harden/runtime-cflags into the security train's measurement tree
  
  cramforce
  and
  claude
  committed
  c852bf4
- Merge branch 'train/security-1' into train/security-1-hardening
  cramforce
  committed
  4bd238f
- Proposal: keep the costly protections off the runtime units
  
  cramforce
  and
  claude
  committed
  60e76b3
- Harden the vendored libraries and the runtime's stack
  
  cramforce
  and
  claude
  committed
  ca7bcc2
- Describe the hardening as decided, and format its test
  
  cramforce
  and
  claude
  committed
  c584915
- Keep the toolchain verifier and its pin file LF in every checkout
  
  cramforce
  and
  claude
  committed
  2d0e275
- Merge origin/main (6c1e5ac877) into train/security-2
  
  cramforce
  and
  claude
  committed
  e46c1a5

Commits

Commits on Oct 18, 2026

Commits on Oct 27, 2026

Commits on Oct 28, 2026

Commits on Oct 30, 2026

Commits on Nov 7, 2026

Commits on Nov 8, 2026