CFLAGS: Enable -fstack-clash-protection on architectures that support it

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/macros/cflags.macro b/macros/cflags.macro
index e6320eb9aac159f122963aa69fd34531edc8d4a0..b56c8b969d2354e540814efaf0013edae6f20d48 100644 (file)
--- a/macros/cflags.macro
+++ b/macros/cflags.macro
@@ -3,8 +3,9 @@
 GLOBAL_CFLAGS   = -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -Werror=format-security
 GLOBAL_CFLAGS  += -fexceptions -fPIC -fstack-protector-strong -grecord-gcc-switches
 
-CFLAGS_i686     = -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tables
-CFLAGS_x86_64   = -m64 -mtune=generic
+CFLAGS_i686     = -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tables -fstack-clash-protection
+CFLAGS_x86_64   = -m64 -mtune=generic -fstack-clash-protection
+CFLAGS_aarch64  = -fstack-clash-protection
 CFLAGS_armv5tel = -march=armv5te -mfloat-abi=soft
 CFLAGS_armv7hl  = -march=armv7-a -mfpu=vfpv3-d16  -mfloat-abi=hard -mthumb