On 7/17/23 09:19, Mateusz Grzonka wrote: > It is essential to avoid buffer overflows and similar bugs as much as > possible. > > According to Intel rules we are obligated to verify certain > compiler flags, so it will be much easier if they are added to the > Makefile. > > Add gcc flags for prevention of buffer overflows, format string vulnerabilities, > stack protection to prevent stack overwrites and aslr enablement through -fPIE. > Also make the flags configurable. > > The changes were verified on gcc versions 7.5, 8.3, 9.2, 10 and 12.2. > > Signed-off-by: Mateusz Grzonka <mateusz.grzonka@xxxxxxxxx> Seems reasonable and fairly broad testing, so applied! Thanks, Jes
