-fstack-protector-strong
-fstack-clash-protection
-fsanitize=safe-stack (not compatible with AddressSanitizer)