public
/
nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

openblas: disable some hardening flags

This commit is contained in:
Thomas Tuegel 2016-10-20 16:37:50 -05:00
parent 9cd8b4e2d7
commit a58ec829e4
No known key found for this signature in database
GPG Key ID: 22CBF5249D4B4D59
1 changed files with 15 additions and 0 deletions
pkgs/development/libraries/science/math/openblas
default.nix

15
pkgs/development/libraries/science/math/openblas/default.nix
View File

@ -34,6 +34,21 @@ stdenv.mkDerivation {
inherit blas64; inherit blas64;
# Some hardening features are disabled due to sporadic failures in
# OpenBLAS-based programs. The problem may not be with OpenBLAS itself, but
# with how these flags interact with hardening measures used downstream.
# In either case, OpenBLAS must only be used by trusted code--it is
# inherently unsuitable for security-conscious applications--so there should
# be no objection to disabling these hardening measures.
hardeningDisable = [
# don't modify or move the stack
"stackprotector" "pic"
# don't alter index arithmetic
"strictoverflow"
# don't interfere with dynamic target detection.
"relro" "bindnow"
];
nativeBuildInputs = optionals stdenv.isDarwin [coreutils] ++ [gfortran perl which]; nativeBuildInputs = optionals stdenv.isDarwin [coreutils] ++ [gfortran perl which];
makeFlags = makeFlags =