diff options
| author | Marc <marc@malloc.me> | 2022-10-16 20:50:01 +0100 |
|---|---|---|
| committer | Marc <foxtrot@malloc.me> | 2023-01-15 20:32:24 +1100 |
| commit | 2b2f3e02697cd706ed55ed60cafaf6d6c2019701 (patch) | |
| tree | e0e3c713417674aafea82f27bef94662bef02d54 | |
| parent | 613555b0c55ebe582ace7581b08fac6b64065710 (diff) | |
| download | libwifi-2b2f3e02697cd706ed55ed60cafaf6d6c2019701.tar.gz libwifi-2b2f3e02697cd706ed55ed60cafaf6d6c2019701.tar.bz2 libwifi-2b2f3e02697cd706ed55ed60cafaf6d6c2019701.zip | |
build: Enable more compiler security flags
| -rw-r--r-- | CMakeLists.txt | 25 |
1 files changed, 22 insertions, 3 deletions
| diff --git a/CMakeLists.txt b/CMakeLists.txt index 4f1b89e..64199da 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt | |||
| @@ -7,11 +7,30 @@ execute_process(COMMAND git log -1 --pretty=format:%h OUTPUT_STRIP_TRAILING_WHIT | |||
| 7 | execute_process(COMMAND date OUTPUT_STRIP_TRAILING_WHITESPACE OUTPUT_VARIABLE BUILDTIME) | 7 | execute_process(COMMAND date OUTPUT_STRIP_TRAILING_WHITESPACE OUTPUT_VARIABLE BUILDTIME) |
| 8 | set(LIBWIFI_VERSION "0.0.8") | 8 | set(LIBWIFI_VERSION "0.0.8") |
| 9 | 9 | ||
| 10 | |||
| 10 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -std=gnu17") | 11 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -std=gnu17") |
| 11 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wall -Wextra") | 12 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wall -Wextra -Wformat=2") |
| 12 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -pedantic -Wno-language-extension-token") | 13 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fstack-protector-strong -D_FORTIFY_SOURCE=2 ") |
| 13 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wmissing-prototypes -Wstrict-prototypes") | 14 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wmissing-prototypes -Wstrict-prototypes") |
| 14 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fstack-protector-strong") | 15 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -O2") |
| 16 | |||
| 17 | if(CMAKE_CXX_COMPILER_ID MATCHES "^(Apple)?Clang$") | ||
| 18 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Walloca -Wformat-security -Wnull-dereference -Wstack-protector") | ||
| 19 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wvla -Warray-bounds -Warray-bounds-pointer-arithmetic -Wassign-enum -Wbad-function-cast") | ||
| 20 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wconditional-uninitialized -Wfloat-equal -Wformat-type-confusion -Widiomatic-parentheses") | ||
| 21 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wimplicit-fallthrough -Wloop-analysis -Wpointer-arith") | ||
| 22 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wswitch-enum -Wtautological-constant-in-range-compare -Wunreachable-code-aggressive -Wcomma") | ||
| 23 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fPIE") | ||
| 24 | else() | ||
| 25 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wformat-overflow=2 -Wformat-truncation=2 -Wformat-security -Wnull-dereference -Wstack-protector") | ||
| 26 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wtrampolines -Walloca -Wvla -Warray-bounds=2 -Wimplicit-fallthrough=3 -Wtraditional-conversion") | ||
| 27 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wshift-overflow=2 -Wcast-qual -Wstringop-overflow=4 -Wconversion -Warith-conversion -Wlogical-op") | ||
| 28 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wduplicated-cond -Wduplicated-branches -Wformat-signedness -Wshadow -Wstrict-overflow=4 -Wundef") | ||
| 29 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -Wstrict-prototypes -Wswitch-default -Wswitch-enum -Wstack-usage=1000000 -Wcast-align=strict") | ||
| 30 | set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fstack-clash-protection -fPIE -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -Wl,-z,separate-code") | ||
| 31 | endif(CMAKE_CXX_COMPILER_ID MATCHES "^(Apple)?Clang$") | ||
| 32 | |||
| 33 | |||
| 15 | 34 | ||
| 16 | set(CMAKE_MACOSX_RPATH 1) | 35 | set(CMAKE_MACOSX_RPATH 1) |
| 17 | 36 | ||