Enable the highest supported level of FORTIFY_SOURCE in our CI tests

diff --git a/tasks.py b/tasks.py
index 39ea6840ef65594c2ebdf59d224c8141b4eb99e8..10380529ff88b3e1e072b2469f79a2680bbdc3fa 100644 (file)
--- a/tasks.py
+++ b/tasks.py
@@ -277,6 +277,7 @@ def ci_auth_configure(c):
                       --with-libdecaf \
                       --prefix=/opt/pdns-auth \
                       --enable-ixfrdist \
+                      --enable-fortify-source=auto \
                       --enable-asan \
                       --enable-ubsan''', warn=True)
     if res.exited != 0:
@@ -299,6 +300,7 @@ def ci_rec_configure(c):
               --with-lua=luajit \
               --with-libcap \
               --with-net-snmp \
+              --enable-fortify-source=auto \
               --enable-dns-over-tls ''' + sanitizers, warn=True)
     if res.exited != 0:
         c.run('cat config.log')
@@ -374,6 +376,7 @@ def ci_dnsdist_configure(c, features):
                      CXX='clang++-12' \
                      --enable-option-checking=fatal \
                      --enable-unit-tests \
+                     --enable-fortify-source=auto \
                      --prefix=/opt/dnsdist %s %s''' % (cflags, cxxflags, features_set, sanitizers), warn=True)
     if res.exited != 0:
         c.run('cat config.log')