diff options
| -rw-r--r-- | eclass/flag-o-matic.eclass | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass index 38ad14d8f5fe..37577209281a 100644 --- a/eclass/flag-o-matic.eclass +++ b/eclass/flag-o-matic.eclass @@ -49,13 +49,20 @@ setup-allowed-flags() { _setup-allowed-flags() { ALLOWED_FLAGS=( -pipe -O '-O[12sg]' '-mcpu=*' '-march=*' '-mtune=*' + + # Hardening flags '-fstack-protector*' - '-fsanitize*' '-fno-sanitize*' '-fstack-check*' -fno-stack-check - -fbounds-check -fbounds-checking -fno-strict-overflow - -fno-PIE -fno-pie -nopie -no-pie -fno-unit-at-a-time + -fbounds-check -fbounds-checking + -fno-PIE -fno-pie -nopie -no-pie + + # Misc + -fno-unit-at-a-time -fno-strict-overflow + + # Sanitizers + '-fsanitize*' '-fno-sanitize*' - # debugging symbols should generally be very safe to add + # Debugging symbols should generally be very safe to add -g '-g[0-9]' -ggdb '-ggdb[0-9]' -gdwarf '-gdwarf-*' |