Overview
Comment: | Make hardening optional, disabled by default when statically linking because it requires the linking program to fully participate |
---|---|
Downloads: | Tarball | ZIP archive | SQL archive |
Timelines: | family | ancestors | descendants | both | trunk |
Files: | files | file ages | folders |
SHA3-256: |
25024a31b0a24964e1ddf95dac48f414 |
User & Date: | rkeene on 2019-06-19 17:45:41 |
Other Links: | manifest | tags |
Context
2019-06-19
| ||
17:58 | Better handling of symbols in our shared object check-in: 3af2fe0ca8 user: rkeene tags: trunk | |
17:45 | Make hardening optional, disabled by default when statically linking because it requires the linking program to fully participate check-in: 25024a31b0 user: rkeene tags: trunk | |
2019-04-12
| ||
16:58 | Better handling of shared/static naming issues check-in: 2c8d3629bc user: rkeene tags: trunk | |
Changes
Modified configure.ac from [9215a3ba47] to [27c882f156].
︙ | ︙ | |||
177 178 179 180 181 182 183 | AX_CHECK_COMPILE_FLAG([-Wall], [CFLAGS="$CFLAGS -Wall"]) AX_CHECK_COMPILE_FLAG([-W], [ CFLAGS="$CFLAGS -W" AX_CHECK_COMPILE_FLAG([-Wno-self-assign], [CFLAGS="$CFLAGS -Wno-self-assign"]) ]) dnl Enable hardening | > > > > > > > > > > > > > > > | | | > | 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 | AX_CHECK_COMPILE_FLAG([-Wall], [CFLAGS="$CFLAGS -Wall"]) AX_CHECK_COMPILE_FLAG([-W], [ CFLAGS="$CFLAGS -W" AX_CHECK_COMPILE_FLAG([-Wno-self-assign], [CFLAGS="$CFLAGS -Wno-self-assign"]) ]) dnl Enable hardening tcltls_enable_hardening='auto' AC_ARG_ENABLE([hardening], AS_HELP_STRING([--disable-hardening], [disable hardening attempts]), [ tcltls_enable_hardening="$enableval" ]) if test "$tcltls_enable_hardening" = 'auto'; then tcltls_enable_hardening='true' if test "$TCLEXT_BUILD" = 'static'; then tcltls_enable_hardening='false' fi elif test "$tcltls_enable_hardening" = 'yes'; then tcltls_enable_hardening='true' else tcltls_enable_hardening='false' fi if test "$tcltls_enable_hardening" = 'true'; then AX_CHECK_COMPILE_FLAG([-fstack-protector-all], [CFLAGS="$CFLAGS -fstack-protector-all"]) AX_CHECK_COMPILE_FLAG([-fno-strict-overflow], [CFLAGS="$CFLAGS -fno-strict-overflow"]) AC_DEFINE([_FORTIFY_SOURCE], [2], [Enable fortification]) fi dnl XXX:TODO: Automatically determine the SSL library to use dnl defaulting to OpenSSL for compatibility reasons if test "$tcltls_ssl_lib" = 'auto'; then tcltls_ssl_lib='openssl' fi |
︙ | ︙ |