public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revert "cc-wrapper: add stackcheck hardening (stack clash)"

Browse Source 
This reverts commit 4150f5e8ba650416dcb8956c9835885cc6a2a80d.

The stack protector hardening breaks the llvm_4 build.
This commit is contained in:
Franz Pletz 2017-06-26 01:12:38 +02:00
parent a4252649bf
commit d42f502c84
No known key found for this signature in database
GPG Key ID: 846FDED7792617B4
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pkgs/build-support/cc-wrapper/add-hardening.sh
View File

@ -1,4 +1,4 @@
hardeningFlags=(fortify stackprotector pic strictoverflow format relro bindnow stackcheck) hardeningFlags=(fortify stackprotector pic strictoverflow format relro bindnow)
hardeningFlags+=("${hardeningEnable[@]}") hardeningFlags+=("${hardeningEnable[@]}")
hardeningCFlags=() hardeningCFlags=()
hardeningLDFlags=() hardeningLDFlags=()
@ -50,11 +50,7 @@ if [[ ! $hardeningDisable =~ "all" ]]; then
if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling bindnow >&2; fi if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling bindnow >&2; fi
hardeningLDFlags+=('-z' 'now') hardeningLDFlags+=('-z' 'now')
;; ;;
stackcheck) *)
if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling stackcheck >&2; fi
hardeningCFlags+=('-fstack-check=specific')
;;
*)
echo "Hardening flag unknown: $flag" >&2 echo "Hardening flag unknown: $flag" >&2
;; ;;
esac esac