ARM-CGT: Security Compile Flag for R5 core in TDA4

Hi,

I am not familiar with all of these options, and how they help with Security.

Have you looked through the TI ARM Compiler User Guide documentaion?

The TI ARM LLVM has its own support for detecting stack overflows. Please see

https://software-dl.ti.com/codegen/docs/tiarmclang/compiler_tools_user_guide/compiler_manual/using_compiler/compiler_options/instrumentation_options.html#stack-smashing-detection-options

The R5Fs on TDA4VH devices typically run out of a combination of TCM/SRAM + DDR, and this makes the firmware segments sparse. So, I do not think PIE is an option. The Linux U-Boot and Kernel implementation use the ELF format and use the standard ELF loading. The RTOS BootLoader converts the loadable segments into a custom binary format. How is PIE helping you with security?

The mechanism provided in TI SDKs is to sign the firmware images with Secure Keys and authenticate them during boot. 

Please look through the ARM LLVM Linker Output Options to look at the available options.

regards

Suman