Ryan Dooley’s patch giving stack-smashing protection in libc is in. It’s not on by default. It adds some overhead but little binary size when turned on.