Commit 92a7dba6 authored Oct 12, 2015 by Daniel Verkamp

build: enable full RELRO in LDFLAGS



This forces the ELF loader to resolve all relocations immediately at
load time rather than allowing lazy binding.

Therefore the loader can make the GOT (global offset table) read-only
once the relocations are complete during the loading process.

Change-Id: I89a878d1060ce79d58c5be7700d8b122a33a8ceb
Signed-off-by: Daniel Verkamp <daniel.verkamp@intel.com>

parent 2a3d4b18

mk/spdk.common.mk

+4 −0

Original line number	Diff line number	Diff line
		@@ -45,6 +45,10 @@ OS := $(shell uname)

		COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m64 -I$(SPDK_ROOT_DIR)/include

		# Enable full RELRO - no lazy relocation (resolve everything at load time).
		# This allows the GOT to be made read-only early in the loading process.
		LDFLAGS += -Wl,-z,relro,-z,now

		ifeq ($(OS),FreeBSD)
		LIBS += -L/usr/local/lib
		COMMON_CFLAGS += -I/usr/local/include