# HG changeset patch
# User schloegl
# Date 1440061434 0
# Node ID a74726ba86d1d25d5749462dc79ca4128f414027
# Parent  e4374feb2e3fa08528d253fa96c41adcbef66feb
[nan-tb] support hardening flags (currenlty only for Linux)

diff -r e4374feb2e3f -r a74726ba86d1 extra/NaN/src/Makefile
--- a/extra/NaN/src/Makefile	Thu Aug 20 09:01:53 2015 +0000
+++ b/extra/NaN/src/Makefile	Thu Aug 20 09:03:54 2015 +0000
@@ -1,5 +1,5 @@
 ####################################################
-# Copyright 2010, 2011,2012 Alois Schloegl 
+# Copyright 2010,2011,2012,2015 Alois Schloegl 
 # This is part of the NaN-toolbox - a statistics and machine learning toolbox for data with and without missing values. 
 # http://pub.ist.ac.at/~schloegl/matlab/NaN/
 ####################################################
@@ -33,10 +33,16 @@
 MKOCTFILE ?= mkoctfile$(OCTAVE_VERSION)
 CC      = gcc
 CXX     = g++
-CFLAGS 	= -fopenmp -Wall -Wextra -Wconversion -O2
+CFLAGS += -fopenmp -Wall -Wextra -Wconversion -O2
 OCTMEX	= $(MKOCTFILE) --mex
 RM      = rm
 
+# Hardening: https://wiki.debian.org/HardeningWalkthrough#Handwritten_Makefiles 
+#CFLAGS = `dpkg-buildflags --get CFLAGS`
+#CFLAGS += `dpkg-buildflags --get CPPFLAGS`
+#CFLAGS += `dpkg-buildflags --get LDFLAGS`
+CFLAGS += -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-z,relro
+
 ifneq ($(OS),Windows_NT)
 CFLAGS      += -fPIC
 endif