From: Vincent Bernat <vincent@bernat.im>
Date: Thu, 28 Sep 2017 08:33:02 +0000 (+0200)
Subject: build: enable clang safe-stack feature if available
X-Git-Tag: 0.9.9~9^2~1
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=38625a92493d8ee8dedbfc554a802f40aad7f59b;p=thirdparty%2Flldpd.git

build: enable clang safe-stack feature if available
---

diff --git a/configure.ac b/configure.ac
index 013eca02..773a81f9 100644
--- a/configure.ac
+++ b/configure.ac
@@ -108,7 +108,10 @@ if test x"$hardening" != x"no"; then
   AX_CFLAGS_GCC_OPTION([-fstack-protector], [LLDP_CFLAGS])
   AX_CFLAGS_GCC_OPTION([-fstack-protector-all], [LLDP_CFLAGS])
   AX_CFLAGS_GCC_OPTION([-fstack-protector-strong], [LLDP_CFLAGS])
+  AX_CFLAGS_GCC_OPTION([-fstack-protector-strong], [LLDP_CFLAGS])
   AX_CFLAGS_GCC_OPTION([-D_FORTIFY_SOURCE=2], [LLDP_CPPFLAGS])
+  AX_LDFLAGS_OPTION([-fsanitize=safe-stack], [LLDP_BIN_LDFLAGS])
+  AX_CFLAGS_GCC_OPTION([-fsanitize=safe-stack], [LLDP_CFLAGS])
 fi
 if test x"$pie" = x"yes"; then
   AX_CFLAGS_GCC_OPTION([-fPIE], [LLDP_CFLAGS])