Changeset View
Changeset View
Standalone View
Standalone View
CMakeLists.txt
Context not available. | |||||
250 | # Add security (hardening flags) | 250 | # Add security (hardening flags) | ||
---|---|---|---|---|---|
251 | IF (UNIX OR APPLE OR ANDROID) | 251 | IF (UNIX OR APPLE OR ANDROID) | ||
252 | SET(SEC_COMP_FLAGS "-D_FORTIFY_SOURCE=2 -fstack-protector-all -Wcast-align -fPIE") | 252 | SET(SEC_COMP_FLAGS "-D_FORTIFY_SOURCE=2 -fstack-protector-all -Wcast-align -fPIE") | ||
253 | IF (NOT ANDROID AND NOT "${CMAKE_CXX_COMPILER_ID}" STREQUAL "Clang") | 253 | IF (NOT ANDROID AND NOT "${CMAKE_CXX_COMPILER_ID}" STREQUAL "Clang" AND NOT APPLE) | ||
254 | SET(SEC_COMP_FLAGS "${SEC_COMP_FLAGS} -Wa,--noexecstack") | 254 | SET(SEC_COMP_FLAGS "${SEC_COMP_FLAGS} -Wa,--noexecstack") | ||
255 | ENDIF () | 255 | ENDIF () | ||
256 | SET(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${SEC_COMP_FLAGS}") | 256 | SET(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${SEC_COMP_FLAGS}") | ||
257 | SET(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} ${SEC_COMP_FLAGS}") | 257 | SET(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} ${SEC_COMP_FLAGS}") | ||
258 | SET(SEC_LINK_FLAGS "-Wl,-z,nodump -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now") | 258 | SET(SEC_LINK_FLAGS "") | ||
259 | IF (NOT ANDROID) | 259 | IF (NOT APPLE) | ||
260 | SET(SEC_LINK_FLAGS "${SEC_LINK_FLAGS} -Wl,-z,nodump -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now") | ||||
261 | ENDIF () | ||||
262 | IF (NOT ANDROID AND NOT APPLE) | ||||
260 | SET(SEC_LINK_FLAGS "${SEC_LINK_FLAGS} -pie") | 263 | SET(SEC_LINK_FLAGS "${SEC_LINK_FLAGS} -pie") | ||
261 | ENDIF () | 264 | ENDIF () | ||
262 | SET(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} ${SEC_LINK_FLAGS}") | 265 | SET(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} ${SEC_LINK_FLAGS}") | ||
Context not available. |