fix: Enable stack canaries, heap poisoning, WDT panic; remove dead code
- CONFIG_COMPILER_STACK_CHECK_MODE_NORM=y (buffer overflow detection) - CONFIG_HEAP_POISONING_LIGHT=y (use-after-free/corruption detection) - CONFIG_ESP_TASK_WDT_PANIC=y (auto-reboot on hung task) - Remove unused #include "esp_now.h" (CVE-2025-52471 mitigation) - Replace hardcoded default IP 192.168.129.11 with 0.0.0.0 in Kconfig
This commit is contained in:
@@ -14,6 +14,7 @@ CONFIG_ESP_CONSOLE_UART_NUM=0
|
||||
CONFIG_CONSOLE_UART_BAUDRATE=921600
|
||||
|
||||
CONFIG_ESP_TASK_WDT_TIMEOUT_S=30
|
||||
CONFIG_ESP_TASK_WDT_PANIC=y
|
||||
|
||||
CONFIG_ESPTOOLPY_MONITOR_BAUD_921600B=y
|
||||
CONFIG_ESPTOOLPY_MONITOR_BAUD=921600
|
||||
@@ -30,6 +31,8 @@ CONFIG_ESP32_WIFI_AMPDU_RX_ENABLED=
|
||||
# Compiler options (size optimization saves ~75 KB)
|
||||
#
|
||||
CONFIG_COMPILER_OPTIMIZATION_SIZE=y
|
||||
CONFIG_COMPILER_STACK_CHECK_MODE_NORM=y
|
||||
CONFIG_HEAP_POISONING_LIGHT=y
|
||||
|
||||
#
|
||||
# FreeRTOS
|
||||
|
||||
Reference in New Issue
Block a user