1 |
commit: 1a8d2dfb17fde7a80a46e3ba5ef7fcb38fd106f2 |
2 |
Author: Sam James <sam <AT> gentoo <DOT> org> |
3 |
AuthorDate: Tue Jan 18 16:38:23 2022 +0000 |
4 |
Commit: Sam James <sam <AT> gentoo <DOT> org> |
5 |
CommitDate: Sat Jan 22 22:18:52 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1a8d2dfb |
7 |
|
8 |
flag-o-matic.eclass: restructure comments a bit |
9 |
|
10 |
No functional change. |
11 |
|
12 |
Signed-off-by: Sam James <sam <AT> gentoo.org> |
13 |
|
14 |
eclass/flag-o-matic.eclass | 15 +++++++++++---- |
15 |
1 file changed, 11 insertions(+), 4 deletions(-) |
16 |
|
17 |
diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass |
18 |
index 38ad14d8f5fe..37577209281a 100644 |
19 |
--- a/eclass/flag-o-matic.eclass |
20 |
+++ b/eclass/flag-o-matic.eclass |
21 |
@@ -49,13 +49,20 @@ setup-allowed-flags() { |
22 |
_setup-allowed-flags() { |
23 |
ALLOWED_FLAGS=( |
24 |
-pipe -O '-O[12sg]' '-mcpu=*' '-march=*' '-mtune=*' |
25 |
+ |
26 |
+ # Hardening flags |
27 |
'-fstack-protector*' |
28 |
- '-fsanitize*' '-fno-sanitize*' |
29 |
'-fstack-check*' -fno-stack-check |
30 |
- -fbounds-check -fbounds-checking -fno-strict-overflow |
31 |
- -fno-PIE -fno-pie -nopie -no-pie -fno-unit-at-a-time |
32 |
+ -fbounds-check -fbounds-checking |
33 |
+ -fno-PIE -fno-pie -nopie -no-pie |
34 |
+ |
35 |
+ # Misc |
36 |
+ -fno-unit-at-a-time -fno-strict-overflow |
37 |
+ |
38 |
+ # Sanitizers |
39 |
+ '-fsanitize*' '-fno-sanitize*' |
40 |
|
41 |
- # debugging symbols should generally be very safe to add |
42 |
+ # Debugging symbols should generally be very safe to add |
43 |
-g '-g[0-9]' |
44 |
-ggdb '-ggdb[0-9]' |
45 |
-gdwarf '-gdwarf-*' |