Security Features for Developers

Updated: October 28, 2024

Security policies
Security policies can make some aspects of security much easier for a developer.
Stack protection
Stack cookies provide protection against stack buffer overflow on stack-allocated variables, which prevents program misbehaviours.
RELRO
Compiler defenses
Address space layout randomization (ASLR)
Address space layout randomization varies the location of data and instructions each time an executable is loaded.
Fortified system functions
QNX Neutrino RTOS fortified system functions are designed to detect out-of-bounds memory accesses by performing lightweight parameter validation at compile-time, runtime, or both.
Cryptography for developers
QNX Neutrino offers developers many alternatives for cryptography functions.
random
Permission checking
Hypervisor security
Because the QNX hypervisor is built as an extension of the QNX Neutrino microkernel, it inherits the security features of the microkernel itself as well as the secure execution environment the microkernel creates. It also has additional layers that are purpose built for secure virtual machine operation.
Writing a resource manager
The information in this section is designed to help you create a QNX Neutrino resource manager that does not contain vulnerabilities. It focuses on properly checking both permissions and the length and content of resource manager messages.