author | koda |
Wed, 12 Jun 2013 19:15:51 +0200 | |
changeset 9191 | fc54667b1203 |
parent 9169 | ef53201e95ec |
child 9219 | 0a4b6bb69f99 |
permissions | -rw-r--r-- |
9152 | 1 |
|
2 |
#TESTING TIME |
|
3 |
include(CheckCCompilerFlag) |
|
4 |
#when you need to check for a linker flag, just leave the argument of "check_c_compiler_flag" empty |
|
5 |
||
9159 | 6 |
# CMAKE_C{XX}_FLAGS is for compiler flags (c and c++) |
7 |
# CMAKE_EXE_LINKER_FLAGS is for linker flags (also add them to pascal_flags and haskell_flags) |
|
9165
7b0d5388abc4
stack-protector flag needs to be passed to the linker as well
koda
parents:
9159
diff
changeset
|
8 |
# CMAKE_SHARED_LIBRARY_<lang>_FLAGS same but for shared libraries |
9152 | 9 |
|
9156
6bf5359d5d14
make sure that also CXX sources pick up the flags (although I'm not 100% of the correctness of the tests)
koda
parents:
9155
diff
changeset
|
10 |
#TODO: should there be two different checks for C and CXX? |
6bf5359d5d14
make sure that also CXX sources pick up the flags (although I'm not 100% of the correctness of the tests)
koda
parents:
9155
diff
changeset
|
11 |
|
9191 | 12 |
#stack protection, when found it needs to go in the linker flags too |
13 |
#it is disabled on win32 because it adds a dll and messes with linker |
|
14 |
#(see 822312 654424 on bugzilla.redhat.com) |
|
9167 | 15 |
check_c_compiler_flag("-fstack-protector-all -fstack-protector" HAVE_STACKPROTECTOR) |
9191 | 16 |
if(HAVE_STACKPROTECTOR AND (NOT WIN32)) |
9167 | 17 |
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fstack-protector-all -fstack-protector") |
18 |
set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fstack-protector-all -fstack-protector") |
|
19 |
set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} -fstack-protector-all -fstack-protector") |
|
20 |
set(CMAKE_SHARED_LIBRARY_C_FLAGS "${CMAKE_SHARED_LIBRARY_C_FLAGS} -fstack-protector-all -fstack-protector") |
|
21 |
set(CMAKE_SHARED_LIBRARY_CXX_FLAGS "${CMAKE_SHARED_LIBRARY_C_FLAGS} -fstack-protector-all -fstack-protector") |
|
9155
480f483de544
add fstack-protector and fvisibility=hidden to cmake tests
koda
parents:
9154
diff
changeset
|
22 |
endif() |
480f483de544
add fstack-protector and fvisibility=hidden to cmake tests
koda
parents:
9154
diff
changeset
|
23 |
|
9169 | 24 |
#symbol visibility, not supported on Windows (so we error out to avoid spam) |
25 |
check_c_compiler_flag("-fvisibility=hidden -Werror" HAVE_VISIBILITY) |
|
26 |
if(HAVE_VISIBILITY) |
|
9155
480f483de544
add fstack-protector and fvisibility=hidden to cmake tests
koda
parents:
9154
diff
changeset
|
27 |
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fvisibility=hidden") |
9156
6bf5359d5d14
make sure that also CXX sources pick up the flags (although I'm not 100% of the correctness of the tests)
koda
parents:
9155
diff
changeset
|
28 |
set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} -fvisibility=hidden") |
9155
480f483de544
add fstack-protector and fvisibility=hidden to cmake tests
koda
parents:
9154
diff
changeset
|
29 |
endif() |
480f483de544
add fstack-protector and fvisibility=hidden to cmake tests
koda
parents:
9154
diff
changeset
|
30 |
|
480f483de544
add fstack-protector and fvisibility=hidden to cmake tests
koda
parents:
9154
diff
changeset
|
31 |
|
9152 | 32 |
#check for noexecstack on ELF, Gentoo security |
33 |
set(CMAKE_REQUIRED_FLAGS "-Wl,-z,noexecstack") |
|
34 |
check_c_compiler_flag("" HAVE_NOEXECSTACK) |
|
35 |
if(HAVE_NOEXECSTACK) |
|
36 |
list(APPEND pascal_flags "-k-z" "-knoexecstack") |
|
9154 | 37 |
list(APPEND haskell_flags "-optl" "-z" "-optl" "noexecstack") |
9159 | 38 |
set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} ${CMAKE_REQUIRED_FLAGS}") |
9152 | 39 |
endif() |
40 |
||
9153 | 41 |
#check for full relro on ELF, Debian security |
42 |
set(CMAKE_REQUIRED_FLAGS "-Wl,-z,relro,-z,now") |
|
43 |
check_c_compiler_flag("" HAVE_RELROFULL) |
|
44 |
if(HAVE_RELROFULL) |
|
45 |
list(APPEND pascal_flags "-k-z" "-krelro" "-k-z" "-know") |
|
9154 | 46 |
list(APPEND haskell_flags "-optl" "-z" "-optl" "relro" "-optl" "-z" "-optl" "now") |
9159 | 47 |
set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} ${CMAKE_REQUIRED_FLAGS}") |
9153 | 48 |
else() |
49 |
#if full relro is not available, try partial relro |
|
50 |
set(CMAKE_REQUIRED_FLAGS "-Wl,-z,relro") |
|
51 |
check_c_compiler_flag("" HAVE_RELROPARTIAL) |
|
52 |
if(HAVE_RELROPARTIAL) |
|
53 |
list(APPEND pascal_flags "-k-z" "-krelro") |
|
9154 | 54 |
list(APPEND haskell_flags "-optl" "-z" "-optl" "relro") |
9159 | 55 |
set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} ${CMAKE_REQUIRED_FLAGS}") |
9153 | 56 |
endif() |
57 |
endif() |
|
58 |
||
9152 | 59 |
#check for ASLR on Windows Vista or later, requires binutils >= 2.20 |
60 |
set(CMAKE_REQUIRED_FLAGS "-Wl,--nxcompat") |
|
61 |
check_c_compiler_flag("" HAVE_WINASLR) |
|
62 |
if(HAVE_WINASLR) |
|
63 |
list(APPEND pascal_flags "-k--nxcompat") |
|
9154 | 64 |
list(APPEND haskell_flags "-optl" "--nxcompat") |
9159 | 65 |
set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} ${CMAKE_REQUIRED_FLAGS}") |
9152 | 66 |
endif() |
67 |
||
68 |
#check for DEP on Windows XP SP2 or later, requires binutils >= 2.20 |
|
69 |
set(CMAKE_REQUIRED_FLAGS "-Wl,--dynamicbase") |
|
70 |
check_c_compiler_flag("" HAVE_WINDEP) |
|
71 |
if(HAVE_WINDEP) |
|
72 |
list(APPEND pascal_flags "-k--dynamicbase") |
|
9154 | 73 |
list(APPEND haskell_flags "-optl" "--dynamicbase") |
9159 | 74 |
set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} ${CMAKE_REQUIRED_FLAGS}") |
9152 | 75 |
endif() |
76 |
||
77 |
||
78 |
#always unset or these flags will be spread everywhere |
|
79 |
unset(CMAKE_REQUIRED_FLAGS) |
|
80 |