Mercurial > forge

changeset 12679:a74726ba86d1 octave-forge

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
[nan-tb] support hardening flags (currenlty only for Linux)
author schloegl
date Thu, 20 Aug 2015 09:03:54 +0000
parents e4374feb2e3f
children 1a9c41feaf2b
files extra/NaN/src/Makefile
diffstat 1 files changed, 8 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/extra/NaN/src/Makefile	Thu Aug 20 09:01:53 2015 +0000
+++ b/extra/NaN/src/Makefile	Thu Aug 20 09:03:54 2015 +0000
@@ -1,5 +1,5 @@
 ####################################################
-# Copyright 2010, 2011,2012 Alois Schloegl 
+# Copyright 2010,2011,2012,2015 Alois Schloegl 
 # This is part of the NaN-toolbox - a statistics and machine learning toolbox for data with and without missing values. 
 # http://pub.ist.ac.at/~schloegl/matlab/NaN/
 ####################################################
@@ -33,10 +33,16 @@
 MKOCTFILE ?= mkoctfile$(OCTAVE_VERSION)
 CC      = gcc
 CXX     = g++
-CFLAGS 	= -fopenmp -Wall -Wextra -Wconversion -O2
+CFLAGS += -fopenmp -Wall -Wextra -Wconversion -O2
 OCTMEX	= $(MKOCTFILE) --mex
 RM      = rm
 
+# Hardening: https://wiki.debian.org/HardeningWalkthrough#Handwritten_Makefiles 
+#CFLAGS = `dpkg-buildflags --get CFLAGS`
+#CFLAGS += `dpkg-buildflags --get CPPFLAGS`
+#CFLAGS += `dpkg-buildflags --get LDFLAGS`
+CFLAGS += -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-z,relro
+
 ifneq ($(OS),Windows_NT)
 CFLAGS      += -fPIC
 endif