From ef75a245f002f3b955272b8bb37518b8315588c9 Mon Sep 17 00:00:00 2001 From: Leah Neukirchen Date: Tue, 20 Jun 2017 19:37:20 +0200 Subject: [PATCH] glibc: enable -fstack-protector=strong. --- srcpkgs/glibc/template | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/srcpkgs/glibc/template b/srcpkgs/glibc/template index aa2be53a2bb..ccaf619865d 100644 --- a/srcpkgs/glibc/template +++ b/srcpkgs/glibc/template @@ -1,7 +1,7 @@ # Template file for 'glibc' pkgname=glibc version=2.25 -revision=5 +revision=6 bootstrap=yes short_desc="The GNU C library" maintainer="Juan RP " @@ -92,7 +92,7 @@ do_configure() { configure_args+=" --with-headers=${XBPS_MASTERDIR}/usr/include" fi - # Disable SSP + # Disable SSP from CFLAGS (enabled below) export CFLAGS="${CFLAGS/-fstack-protector-strong/}" # Disable FORTIFY_SOURCE export CFLAGS="${CFLAGS/-D_FORTIFY_SOURCE=?/}" @@ -106,6 +106,7 @@ do_configure() { --enable-stack-guard-randomization \ --without-selinux --without-cvs --without-gd \ --disable-lock-elision \ + --enable-stack-protector=strong \ libc_cv_rootsbindir=/usr/bin \ libc_cv_rtlddir=${_libdir} libc_cv_slibdir=${_libdir} }