add more hardening flags

zoff99 · Mar 5, 2024 · 760155b · 760155b
1 parent d60f412
commit 760155b
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/circle_scripts/deps_linux.sh b/circle_scripts/deps_linux.sh
@@ -28,8 +28,8 @@ export MAKEFLAGS
 WGET_OPTIONS="--timeout=10"
 export WGET_OPTIONS
 
-CXXFLAGS_ADDON='-O2 -g -fPIC -D_FORTIFY_SOURCE=2 -fstack-protector-strong'
-CFLAGS_ADDON='-O2 -g -fPIC -D_FORTIFY_SOURCE=2 -fstack-protector-strong'
+CXXFLAGS_ADDON='-O2 -g -fPIC -D_FORTIFY_SOURCE=2 -fstack-clash-protection -fcf-protection=full'
+CFLAGS_ADDON='-O2 -g -fPIC -D_FORTIFY_SOURCE=2 -fstack-clash-protection -fcf-protection=full'
 CFLAGS_MORE='--param=ssp-buffer-size=1 -fstack-protector-all'
 # ----------- config ------------
 

diff --git a/circle_scripts/java_jni_lib_linux.sh b/circle_scripts/java_jni_lib_linux.sh
@@ -72,7 +72,7 @@ echo "JAVADIR1:""$JAVADIR1"
 echo "JAVADIR2:""$JAVADIR2"
 
 
-CFLAGS_ADDON='-O2 -g -fPIC -D_FORTIFY_SOURCE=2'
+CFLAGS_ADDON='-O2 -g -fPIC -D_FORTIFY_SOURCE=2 -fstack-clash-protection -fcf-protection=full'
 CFLAGS_MORE="--param=ssp-buffer-size=1 -fstack-protector-all -std=gnu99 -I$_INST_/include/ -L$_INST_/lib"
 
 # if [ "$1""x" == "localx" ]; then