]> code.ossystems Code Review - openembedded-core.git/commit
security_flags.inc: Add same O<level> as in SELECTED_OPTIMIZATION
authorKhem Raj <raj.khem@gmail.com>
Wed, 10 Feb 2021 07:40:44 +0000 (23:40 -0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 12 Feb 2021 23:32:11 +0000 (23:32 +0000)
commit9571a18f7d15b3bffafc2e277ab90a21d6763697
treeb53bc13f12f93c4ed465f5094cec6f2b8f03e9a0
parented5e0de938469a7fa4e6cd725d9e0c8325d890d3
security_flags.inc: Add same O<level> as in SELECTED_OPTIMIZATION

Adding -O can be troublesome in some packages where it may override the
O<n> specified by CFLAGS, this can be due to configure processing of
CFLAGS and munging them into new values in Makefiles, which is
contructed from CC and CFLAGS passed by bitbake environment. Problem
arises if the sequence is altered, which seems to be the case in some
packages e.g. ncurses, where the value from CC variable is added last
and thus overrides -O<n> coming from CFLAGS,

Therefore grok the value from SELECTED_OPTIMIZATION and append the
appropriate -O<level> flag to lcl_maybe_fortify so the level does not
change inaderdantly.

Since we do not use -O0 anymore there is no point of checking for
DEBUG_BUILD since it uses -Og now which works fine with
-D_FORTIFY_SOURCE=2, so check for optlevel O0 instead

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/conf/distro/include/security_flags.inc