moritzruth/void-packages
1
0
Fork 0
Code Releases Activity Actions 2

env/hardening: handle {i686,mips,mipsel}-musl in a common place.

Browse source
This commit is contained in:
Juan RP 2015-12-12 08:32:38 +01:00
parent 4ef7d8525f
commit b53ac251ea
1 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
common/environment/configure/hardening.sh
View file

@ -4,7 +4,17 @@ CXXFLAGS="-fstack-protector-strong -D_FORTIFY_SOURCE=2 $CXXFLAGS"
# Enable as-needed and relro by default. # Enable as-needed and relro by default.
LDFLAGS="-Wl,--as-needed -Wl,-z,relro $LDFLAGS" LDFLAGS="-Wl,--as-needed -Wl,-z,relro $LDFLAGS"
if [ -z "$nopie" ] && [ "$XBPS_TARGET_ARCH" != mipsel-musl ]; then case "$XBPS_TARGET_MACHINE" in
i686-musl) # SSP currently broken (see https://github.com/voidlinux/void-packages/issues/2902)
CFLAGS+=" -fno-stack-protector"
CXXFLAGS+=" -fno-stack-protector"
;;
mips-musl|mipsel-musl) # PIE support broken
unset nopie
;;
esac
if [ -z "$nopie" ]; then
_GCCSPECSDIR=${XBPS_COMMONDIR}/environment/configure/gccspecs _GCCSPECSDIR=${XBPS_COMMONDIR}/environment/configure/gccspecs
CFLAGS="-specs=${_GCCSPECSDIR}/hardened-cc1 $CFLAGS" CFLAGS="-specs=${_GCCSPECSDIR}/hardened-cc1 $CFLAGS"
CXXFLAGS="-specs=${_GCCSPECSDIR}/hardened-cc1 $CXXFLAGS" CXXFLAGS="-specs=${_GCCSPECSDIR}/hardened-cc1 $CXXFLAGS"