additional compiler hardening flags

Darren Tucker dtucker at zip.com.au
Thu Apr 18 20:13:26 EST 2013


On Thu, Apr 18, 2013 at 11:29:55AM +0200, Corinna Vinschen wrote:
> Sounds good to me, but wouldn't it be simpler to add -Werror by default
> in OSSH_CHECK_CFLAG_COMPILE and OSSH_CHECK_CFLAG_LINK?

I considered that, but I was concerned it may mis-detect some of the other
options for compilers that aren't gcc, but identify themselves as such
enough that configure thinks they are and sets $GCC (eg clang, intelcc).
I guess we could check for -Werror too before using it.

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


More information about the openssh-unix-dev mailing list