[hardening-discuss] cmake vs DEB_BUILD_HARDENING vs 64-bit

Kees Cook kees at outflux.net
Mon Apr 14 20:04:34 UTC 2008


Hi Pierre,

On Mon, Apr 14, 2008 at 09:25:08AM -0700, Kees Cook wrote:
> This seems to be a bug in the hardening-wrapper.  Cmake is doing
> builds in a way that wasn't expected (i.e. passing -fPIC during
> an executable build, which disables PIE at the compiler level,
> but the linker will still attempt to do it).  While I think cmake

I've fixed hardening-wrapper to behave better with cmake (or rather,
with unexpected -fPIC flags).  Thanks for providing an easy test-case
for this.  :)

hardening-wrapper 1.10 should work with cmake now.

-Kees

-- 
Kees Cook                                            @outflux.net



More information about the hardening-discuss mailing list