build: enable -fstack-protector

Change-Id: I2ba23c48ee8b9048022cff6cc861e990fd1ff570
Signed-off-by: Daniel Verkamp <daniel.verkamp@intel.com>
This commit is contained in:
Daniel Verkamp 2015-10-13 10:04:04 -07:00
parent 3a2b871a41
commit 557f3bd6c2

View File

@ -47,6 +47,9 @@ COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m6
COMMON_CFLAGS += -Wformat -Wformat-security -Wformat-nonliteral
# Enable stack buffer overflow checking
COMMON_CFLAGS += -fstack-protector
# Enable full RELRO - no lazy relocation (resolve everything at load time).
# This allows the GOT to be made read-only early in the loading process.
LDFLAGS += -Wl,-z,relro,-z,now