facebook/hhvm — pull request #3844 by denji (2014-09-25 08:33:57+00:00)
Title: Support GCC/LLVM stack-smashing protection

Turn it on with `cmake -DENABLE_SSP=1` RedHat uses more secure against buffer/stack overflow exploits.