[FFmpeg-cvslog] configure: Provide an hardened toolchain option

Luca Barbato git at videolan.org
Tue Oct 29 19:56:50 CET 2013


ffmpeg | branch: master | Luca Barbato <lu_zero at gentoo.org> | Mon Oct 28 13:22:52 2013 +0100| [e78913052263af80855590659fb0f705e8f13c8a] | committer: Luca Barbato

configure: Provide an hardened toolchain option

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=e78913052263af80855590659fb0f705e8f13c8a
---

 configure |    4 ++++
 1 file changed, 4 insertions(+)

diff --git a/configure b/configure
index 34a3650..ebd21b2 100755
--- a/configure
+++ b/configure
@@ -2288,6 +2288,10 @@ case "$toolchain" in
         add_cflags  -fprofile-arcs -ftest-coverage
         add_ldflags -fprofile-arcs -ftest-coverage
     ;;
+    hardened)
+        add_cflags -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -fno-strict-overflow -fstack-protector-all
+        add_ldflags -Wl,-z,relro -Wl,-z,now
+    ;;
     ?*)
         die "Unknown toolchain $toolchain"
     ;;



More information about the ffmpeg-cvslog mailing list