From adbb26bc0a49d083472d24762255ff48bd001e45 Mon Sep 17 00:00:00 2001 From: Vincent Bernat Date: Thu, 10 Jan 2019 22:36:55 +0100 Subject: [PATCH] build: enable increased reliability of stack overflow detection See https://developers.redhat.com/blog/2018/03/21/compiler-and-linker-flags-gcc/ --- configure.ac | 1 + 1 file changed, 1 insertion(+) diff --git a/configure.ac b/configure.ac index 589cd969..ef4ad69c 100644 --- a/configure.ac +++ b/configure.ac @@ -108,6 +108,7 @@ if test x"$hardening" != x"no"; then AX_CFLAGS_GCC_OPTION([-fstack-protector-all], [LLDP_CFLAGS]) AX_CFLAGS_GCC_OPTION([-fstack-protector-strong], [LLDP_CFLAGS]) AX_CFLAGS_GCC_OPTION([-fstack-protector-strong], [LLDP_CFLAGS]) + AX_CFLAGS_GCC_OPTION([-fstack-clash-protection], [LLDP_CFLAGS]) AX_CFLAGS_GCC_OPTION([-D_FORTIFY_SOURCE=2], [LLDP_CPPFLAGS]) fi if test x"$pie" = x"yes"; then -- 2.39.2