Jeffrey Walton <noloader@xxxxxxxxx> writes:
> Here are the flags I am interested in. Again, the developers generally
> don't supply them ("it compiles, so ship it!"). I'm interested in
> warnings too because I need to see dumb, CompSci 101 mistakes such as
> ignoring return values, truncation problems, and conversion problems.
> When I find them, I need to fix them because developers don't care about
> these things ("it compiles, so ship it!")
> EXECUTABLE:
> -Wall -Wextra -Wconversion -fPIE -pie -Wno-unused-parameter -Wformat=2
> -Wformat-security -fstack-protector-all -Wstrict-overflow
> -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
> SHARED OBJECT:
> -Wall -Wextra -Wconversion -fPIC -shared -Wno-unused-parameter
> -Wformat=2 -Wformat-security -fstack-protector-all -Wstrict-overflow
> -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
*If* the package uses libtool, which I realize is a big if, just pass
-fPIE in CFLAGS and don't worry about the difference. Libtool is already
adding -fPIC -shared when building the shared objects, and is smart enough
to drop -fPIE from the shared objects as pointless.
--
Russ Allbery (rra@xxxxxxxxxxxx) <http://www.eyrie.org/~eagle/>
_______________________________________________
Autoconf mailing list
Autoconf@xxxxxxx
https://lists.gnu.org/mailman/listinfo/autoconf
