Deploy maximum "fortified source" and stack protection.
This commit is contained in:
parent
007db7a729
commit
b736e3bc8e
1 changed files with 2 additions and 2 deletions
4
Makefile
4
Makefile
|
@ -8,7 +8,7 @@ VERS=$(shell sed -n <NEWS '/^[0-9]/s/:.*//p' | head -1)
|
||||||
.PHONY: check coverage
|
.PHONY: check coverage
|
||||||
|
|
||||||
CC?=gcc
|
CC?=gcc
|
||||||
CCFLAGS+=-std=c99 -D_DEFAULT_SOURCE -DVERSION=\"$(VERS)\" -O2
|
CCFLAGS+=-std=c99 -D_DEFAULT_SOURCE -DVERSION=\"$(VERS)\" -O2 -D_FORTIFY_SOURCE=2 -fstack-protector-all
|
||||||
LIBS=$(shell pkg-config --libs libedit)
|
LIBS=$(shell pkg-config --libs libedit)
|
||||||
INC+=$(shell pkg-config --cflags libedit)
|
INC+=$(shell pkg-config --cflags libedit)
|
||||||
|
|
||||||
|
@ -117,7 +117,7 @@ linty: CCFLAGS += -Winit-self
|
||||||
linty: CCFLAGS += -Wpointer-arith
|
linty: CCFLAGS += -Wpointer-arith
|
||||||
linty: advent cheat
|
linty: advent cheat
|
||||||
|
|
||||||
debug: CCFLAGS += -O0 --coverage -ggdb
|
debug: CCFLAGS += -O0 --coverage -ggdb -U_FORTIFY_SOURCE
|
||||||
debug: linty
|
debug: linty
|
||||||
|
|
||||||
CSUPPRESSIONS = --suppress=missingIncludeSystem --suppress=invalidscanf
|
CSUPPRESSIONS = --suppress=missingIncludeSystem --suppress=invalidscanf
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue