Enable control flow protection
This commit is contained in:
parent
a128fdcc28
commit
ea82c9ba3e
|
@ -7,7 +7,7 @@
|
||||||
{%- set OPENSSL_PREFIX = "/usr/local/desktop-app/openssl-1.1.1" -%}
|
{%- set OPENSSL_PREFIX = "/usr/local/desktop-app/openssl-1.1.1" -%}
|
||||||
{%- set CMAKE_VER = "3.26.3" -%}
|
{%- set CMAKE_VER = "3.26.3" -%}
|
||||||
{%- set CMAKE_FILE = "cmake-" ~ CMAKE_VER ~ "-Linux-x86_64.sh" -%}
|
{%- set CMAKE_FILE = "cmake-" ~ CMAKE_VER ~ "-Linux-x86_64.sh" -%}
|
||||||
{%- set CFLAGS_DEBUG = "-g -pipe -fPIC -fstack-protector-all -fstack-clash-protection -D_GLIBCXX_ASSERTIONS" -%}
|
{%- set CFLAGS_DEBUG = "-g -pipe -fPIC -fstack-protector-all -fstack-clash-protection -fcf-protection -D_GLIBCXX_ASSERTIONS" -%}
|
||||||
{%- set CFLAGS_LTO = "-flto=auto -ffat-lto-objects" -%}
|
{%- set CFLAGS_LTO = "-flto=auto -ffat-lto-objects" -%}
|
||||||
{%- set LibrariesPath = "/usr/src/Libraries" -%}
|
{%- set LibrariesPath = "/usr/src/Libraries" -%}
|
||||||
|
|
||||||
|
@ -52,7 +52,7 @@ FROM builder-base AS builder
|
||||||
ENV AR gcc-ar
|
ENV AR gcc-ar
|
||||||
ENV RANLIB gcc-ranlib
|
ENV RANLIB gcc-ranlib
|
||||||
ENV NM gcc-nm
|
ENV NM gcc-nm
|
||||||
ENV CFLAGS {% if DEBUG %}-g{% endif %} -O3 {% if LTO %}{{ CFLAGS_LTO }}{% endif %} -pipe -fPIC -fstack-protector-all -fstack-clash-protection -DNDEBUG -D_FORTIFY_SOURCE=2 -D_GLIBCXX_ASSERTIONS
|
ENV CFLAGS {% if DEBUG %}-g{% endif %} -O3 {% if LTO %}{{ CFLAGS_LTO }}{% endif %} -pipe -fPIC -fstack-protector-all -fstack-clash-protection -fcf-protection -DNDEBUG -D_FORTIFY_SOURCE=2 -D_GLIBCXX_ASSERTIONS
|
||||||
ENV CXXFLAGS $CFLAGS
|
ENV CXXFLAGS $CFLAGS
|
||||||
|
|
||||||
FROM builder AS patches
|
FROM builder AS patches
|
||||||
|
|
2
cmake
2
cmake
|
@ -1 +1 @@
|
||||||
Subproject commit a41fa6e14006204f3fea7993a775e14f8fdde9fc
|
Subproject commit a1ec454cbcc1a6ce9970968e3413c9a4341968d0
|
Loading…
Reference in New Issue
Block a user