From c3c5b96e238cfbb0d871ee51c7be3a4e18247be7 Mon Sep 17 00:00:00 2001 From: Sergey Pokhodenko Date: Thu, 22 Oct 2020 12:59:29 -0500 Subject: [PATCH] Add flags for fixing hardening-check See https://wiki.debian.org/HardeningWalkthrough#Testing_your_packages_after_conversion --- backends/CMakeLists.txt | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/backends/CMakeLists.txt b/backends/CMakeLists.txt index 2c4fda3157..bd893c888a 100644 --- a/backends/CMakeLists.txt +++ b/backends/CMakeLists.txt @@ -76,12 +76,10 @@ if(WIN32) set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -Qstd=c++17") set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -ggdb3 -DDEBUG ") elseif(UNIX) - set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} \ - -Wall -Wextra -Winit-self -Wuninitialized -Wmissing-declarations \ - -fdiagnostics-color=auto -O3 \ - ") + set(SDL_FLAGS "-fstack-protector -fstack-protector-all -fpic -fPIC -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -fno-strict-overflow -fno-delete-null-pointer-checks") + set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${SDL_FLAGS} -Wall -Wextra -Winit-self -Wuninitialized -Wmissing-declarations -fdiagnostics-color=auto") set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -ggdb3 -DDEBUG ") - set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -std=c++17 -fsycl") + set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} ${SDL_FLAGS} -std=c++17 -fsycl") else() message(FATAL_ERROR "Unsupported system.") endif()