[PORT FROM PMRI] Add stack protection flag for kernelflinger

It requires stack-protector, stack execution protection, data relocation and protection (RELRO) Add CFLAGS: -fstack-protector-strong -Wformat -Wformat-security -D_FORTIFY_SOURCE=2 Add LDFLAGS: -znoexecstack -zrelro -znow Change-Id: I3c56445f0bb1c223460048d682bfe03882f17f3a Tracked-On: OAM-73605 Signed-off-by: Heng Luo <[email protected]>
projectceladon · Mar 26, 2019 · 911bf1a · 911bf1a
1 parent cfe2fa3
commit 911bf1a
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/core/definitions.mk b/core/definitions.mk
@@ -59,7 +59,7 @@ endif
 otatools: $(INTEL_OTATOOLS)
 
 # FIXME: may be unsafe to omit -no-sse
-TARGET_IAFW_GLOBAL_CFLAGS := -ggdb -O3 -fno-stack-protector \
+TARGET_IAFW_GLOBAL_CFLAGS := -ggdb -O3 -fstack-protector-strong \
 	-fno-strict-aliasing -fpic \
 	-fshort-wchar -mno-red-zone \
 	-mno-mmx -fno-builtin \
@@ -73,10 +73,12 @@ TARGET_IAFW_GLOBAL_CFLAGS := -ggdb -O3 -fno-stack-protector \
 	-Wno-unused-const-variable \
 	-Wno-constant-conversion \
 	-Wno-unused-function \
-	-Wno-tautological-pointer-compare
+	-Wno-tautological-pointer-compare \
+	-Wformat -Wformat-security \
+	-D_FORTIFY_SOURCE=2
 
 TARGET_IAFW_GLOBAL_LDFLAGS := -nostdlib --no-undefined \
-	--fatal-warnings -Bsymbolic -znocombreloc
+	--fatal-warnings -Bsymbolic -znocombreloc -znoexecstack -zrelro -znow
 
 ifneq ($(TARGET_UEFI_ARCH),)
     TARGET_IAFW_ARCH := $(TARGET_UEFI_ARCH)