-fstack-protector-strong -fstack-clash-protection -fsanitize=safe-stack (not compatible with AddressSanitizer)