Differential D55624 Diff 173723 Mk/Features/ssp.mk

Changeset View

Standalone View

Mk/Features/ssp.mk

	# SSP Support			# SSP Support
	#			#
	# The -fstack-protector-strong flag enables "stack smashing" protection on a			# The -fstack-protector-strong flag enables "stack smashing" protection on a
	# wider set of functions than the default -fstack-protector, but without the			# wider set of functions than the default -fstack-protector, but without the
	# full performance cost of -fstack-protector-all. Under the hood it inserts a			# full performance cost of -fstack-protector-all. Under the hood it inserts a
	# small "canary" value on the stack just before the saved return address; at			# small "canary" value on the stack just before the saved return address; at
	# function exit it checks that the canary hasn't been overwritten by a buffer			# function exit it checks that the canary hasn't been overwritten by a buffer
	# overflow. If it has been clobbered, the runtime aborts the program rather			# overflow. If it has been clobbered, the runtime aborts the program rather
	# than returning into corrupted code.			# than returning into corrupted code.

	.if !defined(_SSP_MK_INCLUDED)			.if !defined(_SSP_MK_INCLUDED)
	_SSP_MK_INCLUDED= yes			_SSP_MK_INCLUDED= yes
	SSP_Include_MAINTAINER= portmgr@FreeBSD.org			SSP_Include_MAINTAINER= portmgr@FreeBSD.org

	. if !defined(SSP_UNSAFE) && \			. if !defined(SSP_UNSAFE)
	(! ${ARCH:Mmips*})
	# Overridable as a user may want to use -fstack-protector-all			# Overridable as a user may want to use -fstack-protector-all
	SSP_CFLAGS?= -fstack-protector-strong			SSP_CFLAGS?= -fstack-protector-strong
	CFLAGS+= ${SSP_CFLAGS}			CFLAGS+= ${SSP_CFLAGS}
	. endif			. endif
	.endif			.endif