CLANG and -fstack-protector

Eitan Adler lists at eitanadler.com
Fri Feb 8 03:01:04 UTC 2013


On 7 February 2013 18:40, Kimmo Paasiala <kpaasial at gmail.com> wrote:
>> Ports are largely independent of the base system, and their compilation
>> flags are different from port to port.  You could set -fstack-protector
>> for your ports in either make.conf or ports.conf, if you wanted.
>
> Is there any work being done to provide an optional Makefile knob
> (WITH_STACK_PROTECTOR ?) to turn on -fstack-protector for ports that
> install network services (or other critical code)? I'd bet such
> feature would be popular.

As far as I am aware no such feature exists.  In any case it would be
subject to the same problem of many ports ignoring CFLAGS and friends.


-- 
Eitan Adler


More information about the freebsd-stable mailing list