Rene Ladan
2a7c056120
Reviewed by: many (*) Differential Revision: https://reviews.freebsd.org/D55624 Differential Revision: https://reviews.freebsd.org/D55642 (merged in from bofh) many (*) acm arrowd brooks cmt dch decke dinoex eduardo fluffy fuz gahr garga jbeich joerg jrm kai kenrap martymac matthew mfechner michaelo mizhka nobutaka pkubaj se tagattie thj Anton Saietskii GenericRikka Gert Doering Jan Bramkamp Oleh Hushchenkov Oleksandr Kryvulia Ralf van der Enden Yamagi desktop kde python tcltk office
21 lines
782 B
Makefile
21 lines
782 B
Makefile
# SSP Support
|
|
#
|
|
# The -fstack-protector-strong flag enables "stack smashing" protection on a
|
|
# wider set of functions than the default -fstack-protector, but without the
|
|
# full performance cost of -fstack-protector-all. Under the hood it inserts a
|
|
# small "canary" value on the stack just before the saved return address; at
|
|
# function exit it checks that the canary hasn't been overwritten by a buffer
|
|
# overflow. If it has been clobbered, the runtime aborts the program rather
|
|
# than returning into corrupted code.
|
|
|
|
.if !defined(_SSP_MK_INCLUDED)
|
|
_SSP_MK_INCLUDED= yes
|
|
SSP_Include_MAINTAINER= portmgr@FreeBSD.org
|
|
|
|
. if !defined(SSP_UNSAFE)
|
|
# Overridable as a user may want to use -fstack-protector-all
|
|
SSP_CFLAGS?= -fstack-protector-strong
|
|
CFLAGS+= ${SSP_CFLAGS}
|
|
. endif
|
|
.endif
|