CFLAGS: Use -fstack-protector-all over -strong

Although -fstack-protector-strong will omit inserting any canary checks
on functions that cannot possibly overflow their stack, we will need all
functions to be protected in order to run our check.

It is more benefitial to us to have the check than optimise for
performance. We also expect LTO to inline all those functions that
possibly do not have a stack.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/macros/cflags.macro b/macros/cflags.macro
index 7fbe4ebb6a15b5c83ca4454c94b1748b0012e556..2366c07ba26b04439fb04f01f7aad0def3e25e85 100644 (file)
--- a/macros/cflags.macro
+++ b/macros/cflags.macro
@@ -21,7 +21,7 @@ build
        CFLAGS += -fPIC
 
        # Enable Stack Smashing Protection
-       CFLAGS += -fstack-protector-strong
+       CFLAGS += -fstack-protector-all
 
        # Enable unwind tables
        CFLAGS += -funwind-tables -fasynchronous-unwind-tables