[Skiboot] [PATCH 09/34] Don't set -fstack-protector-all unconditionally

Benjamin Herrenschmidt benh at kernel.crashing.org
Sun Jul 24 09:27:03 AEST 2016


We set it already in DEBUG builds and we use -fstack-protector-strong
in release builds which provides most of the benefits and is more
efficient.

Signed-off-by: Benjamin Herrenschmidt <benh at kernel.crashing.org>
---
 Makefile.main | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile.main b/Makefile.main
index bd5295f..4f95bc9 100644
--- a/Makefile.main
+++ b/Makefile.main
@@ -65,7 +65,7 @@ ifeq ($(DEBUG),1)
 CPPFLAGS += -DDEBUG -DCCAN_LIST_DEBUG
 endif
 
-CFLAGS := -fno-strict-aliasing -fstack-protector-all -pie -mbig-endian -m64
+CFLAGS := -fno-strict-aliasing -pie -mbig-endian -m64
 CFLAGS += -Wl,--oformat,elf64-powerpc
 CFLAGS += $(call try-cflag,$(CC),-mabi=elfv1)
 CFLAGS += $(call try-cflag,$(CC),-std=gnu11)
-- 
2.7.4



More information about the Skiboot mailing list