Commit 557f3bd6 authored by Daniel Verkamp's avatar Daniel Verkamp
Browse files

build: enable -fstack-protector 



Change-Id: I2ba23c48ee8b9048022cff6cc861e990fd1ff570
Signed-off-by: default avatarDaniel Verkamp <daniel.verkamp@intel.com>
parent 3a2b871a

mk/spdk.common.mk

+3 −0
Original line number Diff line number Diff line
@@ -47,6 +47,9 @@ COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m6 


COMMON_CFLAGS += -Wformat -Wformat-security -Wformat-nonliteral



# Enable stack buffer overflow checking

COMMON_CFLAGS += -fstack-protector



# Enable full RELRO - no lazy relocation (resolve everything at load time).

# This allows the GOT to be made read-only early in the loading process.

LDFLAGS += -Wl,-z,relro,-z,now