ref: 17c0cc9c3cdf1525933c44143151e4460d4328bf
parent: c5bc60d5ed03328f492ca2da1436bab1139e2174
author: Mark Harris <mark.hsj@gmail.com>
date: Fri Feb 23 16:53:50 EST 2018
Switch to -fstack-protector-strong from -all -fstack-protector-all appears to be overkill; -fstack-protector-strong still adds checks where they make sense.
--- a/configure.ac
+++ b/configure.ac
@@ -252,7 +252,7 @@
])
])
-dnl Enable stack-protector-all only on x86 where it's well supported.
+dnl Enable stack-protector-strong only on x86 where it's well supported.
dnl on some platforms it causes crashes. Hopefully the OS's default's
dnl include this on platforms that work but have been missed here.
AC_ARG_ENABLE([stack-protector],
@@ -265,8 +265,8 @@
AS_IF([test "$enable_stack_protector" = "yes"],
[
saved_CFLAGS="$CFLAGS"
- CFLAGS="$CFLAGS -fstack-protector-all"
- AC_MSG_CHECKING([if ${CC} supports -fstack-protector-all])
+ CFLAGS="$CFLAGS -fstack-protector-strong"
+ AC_MSG_CHECKING([if ${CC} supports -fstack-protector-strong])
AC_LINK_IFELSE([AC_LANG_PROGRAM([],[[char foo;]])],
[ AC_MSG_RESULT([yes]) ],
[