Skip to content

Commit

Permalink
[mod] disabled -fcf-protection=full in darwin builds
Browse files Browse the repository at this point in the history
  • Loading branch information
stef committed Jul 12, 2024
1 parent 7710461 commit bc269cc
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions src/makefile
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ PREFIX?=/usr/local
LIBS=-lsodium -loprf
DEFINES=
CFLAGS?=-march=native -Wall -O2 -g -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fasynchronous-unwind-tables -fpic \
-fstack-clash-protection -fcf-protection=full -Werror=format-security -Werror=implicit-function-declaration \
-fstack-clash-protection -Werror=format-security -Werror=implicit-function-declaration \
-Warray-bounds -fsanitize=bounds -fsanitize-undefined-trap-on-error -ftrapv -std=c99 $(DEFINES)
#-fstrict-flex-arrays
LDFLAGS=-g $(LIBS)
Expand All @@ -18,7 +18,8 @@ ifeq ($(UNAME),Darwin)
SOFLAGS=-Wl,-install_name,liboprf.$(SOEXT)
else
CFLAGS+=-Wl,-z,defs -Wl,-z,relro -Wl,-z,noexecstack -Wl,-z,now \
-fsanitize=signed-integer-overflow -fsanitize-undefined-trap-on-error
-fsanitize=signed-integer-overflow -fsanitize-undefined-trap-on-error \
-fcf-protection=full
# -mbranch-protection=standard -fstrict-flex-arrays=3
SOEXT=so
SOFLAGS=-Wl,-soname,libopaque.$(SOEXT).$(SOVER)
Expand Down

0 comments on commit bc269cc

Please sign in to comment.