From 37dd6912701cb16f6339af97216e159c3f9038ee Mon Sep 17 00:00:00 2001 From: Daniel Borkmann Date: Fri, 24 May 2013 13:32:04 +0200 Subject: [PATCH] make: minor update in cflags Add -z relro for linking, move --param ssp-buffer-size=4 to stack protector flag, and more. Signed-off-by: Daniel Borkmann --- Makefile | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/Makefile b/Makefile index c35cd078..2c7852a2 100644 --- a/Makefile +++ b/Makefile @@ -38,7 +38,8 @@ endif # For packaging purposes, you might want to call your own: # make CFLAGS="" -CFLAGS_DEF = -fstack-protector +CFLAGS_DEF = -fstack-protector-all -Wstack-protector +CFLAGS_DEF += --param=ssp-buffer-size=4 ifeq ($(DEBUG), 1) CFLAGS_DEF += -g CFLAGS_DEF += -O2 @@ -46,13 +47,13 @@ else CFLAGS_DEF += -march=native CFLAGS_DEF += -mtune=native CFLAGS_DEF += -O3 - CFLAGS_DEF += -fpie + CFLAGS_DEF += -fPIE -pie CFLAGS_DEF += -pipe CFLAGS_DEF += -fomit-frame-pointer + CFLAGS_DEF += -Wl,-z,relro,-z,now endif -CFLAGS_DEF += --param=ssp-buffer-size=4 CFLAGS_DEF += -fno-strict-aliasing -CFLAGS_DEF += -fexceptions +CFLAGS_DEF += -fexceptions -ftrapv CFLAGS_DEF += -fasynchronous-unwind-tables CFLAGS_DEF += -fno-delete-null-pointer-checks CFLAGS_DEF += -D_FORTIFY_SOURCE=2 -- 2.11.4.GIT