From: Michael Tremer Date: Thu, 9 Mar 2023 11:12:04 +0000 (+0000) Subject: CFLAGS: Use -fstack-protector-all over -strong X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f1153a857affb461de71d0c7e62cbf39de0c802b;p=people%2Fstevee%2Fpakfire.git CFLAGS: Use -fstack-protector-all over -strong Although -fstack-protector-strong will omit inserting any canary checks on functions that cannot possibly overflow their stack, we will need all functions to be protected in order to run our check. It is more benefitial to us to have the check than optimise for performance. We also expect LTO to inline all those functions that possibly do not have a stack. Signed-off-by: Michael Tremer --- diff --git a/macros/cflags.macro b/macros/cflags.macro index 7fbe4ebb..2366c07b 100644 --- a/macros/cflags.macro +++ b/macros/cflags.macro @@ -21,7 +21,7 @@ build CFLAGS += -fPIC # Enable Stack Smashing Protection - CFLAGS += -fstack-protector-strong + CFLAGS += -fstack-protector-all # Enable unwind tables CFLAGS += -funwind-tables -fasynchronous-unwind-tables