diff --git a/Mk/Features/ssp.mk b/Mk/Features/ssp.mk index 2af92acd1d8e..b6be18ce35e8 100644 --- a/Mk/Features/ssp.mk +++ b/Mk/Features/ssp.mk @@ -1,22 +1,21 @@ # SSP Support # # The -fstack-protector-strong flag enables "stack smashing" protection on a # wider set of functions than the default -fstack-protector, but without the # full performance cost of -fstack-protector-all. Under the hood it inserts a # small "canary" value on the stack just before the saved return address; at # function exit it checks that the canary hasn't been overwritten by a buffer # overflow. If it has been clobbered, the runtime aborts the program rather # than returning into corrupted code. .if !defined(_SSP_MK_INCLUDED) _SSP_MK_INCLUDED= yes SSP_Include_MAINTAINER= portmgr@FreeBSD.org . if !defined(SSP_UNSAFE) && \ (! ${ARCH:Mmips*}) # Overridable as a user may want to use -fstack-protector-all SSP_CFLAGS?= -fstack-protector-strong CFLAGS+= ${SSP_CFLAGS} -LDFLAGS+= ${SSP_CFLAGS} . endif .endif