debian-hardened-buildflags

Gbp-Pq: Name debian-hardened-buildflags.diff

diff --git a/configure.in b/configure.in
index ad16f8474ae62b2e7912492f07cd8acdf2deaec1..e43e113d922ffa2d402ba0f4893ae8740fcb3805 100644 (file)
Binary files a/configure.in and b/configure.in differ

diff --git a/set_soenv.in b/set_soenv.in
index 067f34b6b9a7d4243f8b1cb9184aa728b59922de..d5f8f83023adc9524d0113f407decc9d603a8464 100755 (executable)
--- a/set_soenv.in
+++ b/set_soenv.in
@@ -1573,6 +1573,10 @@ ToFile( "COMPATH",           $COMPATH,           "e" );
 ToFile( "CPU",               $CPU,               "e" );
 ToFile( "CPUNAME",           $CPUNAME,           "e" );
 ToFile( "CDEFAULTOPT",       "@CDEFAULTOPT@",    "e" );
+ToFile( "HARDEN_CFLAGS",     "@HARDEN_CFLAGS@",  "e" );
+ToFile( "HARDEN_CXXFLAGS",   "@HARDEN_CXXFLAGS@","e" );
+ToFile( "HARDEN_CPPFLAGS",   "@HARDEN_CPPFLAGS@","e" );
+ToFile( "HARDEN_LDFLAGS",    "@HARDEN_LDFLAGS@", "e" );
 ToFile( "GUI",               $GUI,               "e" );
 ToFile( "GUIBASE",           $GUIBASE,           "e" );
 ToFile( "GVER",              $GVER,              "e" );

diff --git a/solenv/gbuild/LinkTarget.mk b/solenv/gbuild/LinkTarget.mk
index c094bb424b542527c1bcf9b3bd4d2042d5134a9b..d6ebb81b2f30106a55751102279ebd908a781686 100644 (file)
--- a/solenv/gbuild/LinkTarget.mk
+++ b/solenv/gbuild/LinkTarget.mk
@@ -46,6 +46,8 @@ CXXFLAGS ?= $(gb_COMPILEROPTFLAGS)
 OBJCXXFLAGS ?= $(gb_COMPILEROPTFLAGS)
 endif
 
+LDFLAGS += $(HARDEN_LDFLAGS)
+
 # if enabled we link all of these libraries into one larger, merged library
 # for which we can do a lot more optimisation, and which is faster to read
 # from disk.

diff --git a/solenv/gbuild/gbuild.mk b/solenv/gbuild/gbuild.mk
index 574e8515bff506524ead8de9d36979608c854fe4..aced5376ad2cd05c0c21247d2723315b8fc7b455 100644 (file)
--- a/solenv/gbuild/gbuild.mk
+++ b/solenv/gbuild/gbuild.mk
@@ -145,6 +145,9 @@ gb__ENV_CXXFLAGS := $(ENVCFLAGSCXX)
 endif
 endif
 
+gb__ENV_CXXFLAGS += $(HARDEN_CXXFLAGS)
+gb__ENV_CFLAGS += $(HARDEN_CFLAGS)
+
 include $(GBUILDDIR)/Helper.mk
 include $(GBUILDDIR)/TargetLocations.mk
 
@@ -244,6 +247,8 @@ ifeq ($(HAVE_THREADSAFE_STATICS),TRUE)
 gb_GLOBALDEFS += -DHAVE_THREADSAFE_STATICS
 endif
 
+gb_GLOBALDEFS += $(HARDEN_CPPFLAGS)
+
 gb_GLOBALDEFS := $(sort $(gb_GLOBALDEFS))
 
 include $(GBUILDDIR)/Deliver.mk

diff --git a/solenv/inc/unxgcc.mk b/solenv/inc/unxgcc.mk
index 94495c59aea866af0fa5f0795ad4a45ec5dedb1a..c3a2d7d230a2140e92caa198c091e69842356b75 100644 (file)
--- a/solenv/inc/unxgcc.mk
+++ b/solenv/inc/unxgcc.mk
@@ -241,6 +241,10 @@ LINKFLAGS += -Wl,--hash-style=$(WITH_LINKER_HASH_STYLE)
 LINKFLAGS += -Wl,-zdynsort
 .ENDIF
 
+LINKFLAGS += $(HARDEN_LDFLAGS)
+CDEFS += $(HARDEN_CPPFLAGS)
+CFLAGS += $(HARDEN_CFLAGS)
+
 # libraries for linking applications
 STDLIBGUIMT+=-Wl,--as-needed $(DL_LIB) $(PTHREAD_LIBS) -lm -Wl,--no-as-needed
 STDLIBCUIMT+=-Wl,--as-needed $(DL_LIB) $(PTHREAD_LIBS) -lm -Wl,--no-as-needed