build: enable -fstack-protector
Change-Id: I2ba23c48ee8b9048022cff6cc861e990fd1ff570 Signed-off-by: Daniel Verkamp <daniel.verkamp@intel.com>
This commit is contained in:
parent
3a2b871a41
commit
557f3bd6c2
@ -47,6 +47,9 @@ COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m6
|
||||
|
||||
COMMON_CFLAGS += -Wformat -Wformat-security -Wformat-nonliteral
|
||||
|
||||
# Enable stack buffer overflow checking
|
||||
COMMON_CFLAGS += -fstack-protector
|
||||
|
||||
# Enable full RELRO - no lazy relocation (resolve everything at load time).
|
||||
# This allows the GOT to be made read-only early in the loading process.
|
||||
LDFLAGS += -Wl,-z,relro,-z,now
|
||||
|
Loading…
Reference in New Issue
Block a user