pacman: Add security hardening compile flags to CXXFLAGS

This commit is contained in:
مهدي شينون (Mehdi Chinoune)
2024-01-21 12:24:07 +01:00
parent 1716104b09
commit 5914ecb408
2 changed files with 8 additions and 8 deletions

View File

@@ -4,7 +4,7 @@
pkgname=pacman
pkgver=6.0.2
pkgrel=12
pkgrel=13
pkgdesc="A library-based package manager with dependency support (MSYS2 port)"
arch=('i686' 'x86_64')
url="https://www.archlinux.org/pacman/"
@@ -80,7 +80,7 @@ validpgpkeys=('6645B0A8C7005E78DB1D7864F99FFE0FEAE999BD' # Allan McRae <allan@a
sha256sums=('SKIP'
'53c0c2d42bc10f265aa41bc412a6ebc2d98177d9356b0fa9a2a130caec46ac2d'
'c12da01ede663a4924d0817a0d1bd6082b1380383cfb74cc1cea08f9d73e4902'
'8cb6b244d39107afc6cff74d919708ffc58b903c42f82d050d1d49bbf31208ab'
'a84354e88f6b0cae3a8005a944fcd88819a0860f4440501cc6f1c1f9abfe87c4'
'98198e1f0f252eae0560d271bee4b9149e127399dd0d3fd5d8d24579d9e0550f'
'd272176dea508bf0972dde6396ca655e900d509099d0a496bd6a138f98bb48df'
'7e2a2fc6799ed8a9dbc8b0712b162be963ed22351e4cb29b3a4d4a4d3f28d7ed'

View File

@@ -43,7 +43,7 @@ if [[ "$MSYSTEM" == "MINGW64" ]]; then
CXX="g++"
CPPFLAGS="-D__USE_MINGW_ANSI_STDIO=1"
CFLAGS="-march=nocona -msahf -mtune=generic -O2 -pipe -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong"
CXXFLAGS="-march=nocona -msahf -mtune=generic -O2 -pipe"
CXXFLAGS="$CFLAGS"
LDFLAGS="-pipe"
elif [[ "$MSYSTEM" == "MINGW32" ]]; then
CARCH="i686"
@@ -55,7 +55,7 @@ elif [[ "$MSYSTEM" == "MINGW32" ]]; then
CXX="g++"
CPPFLAGS="-D__USE_MINGW_ANSI_STDIO=1"
CFLAGS="-march=pentium4 -mtune=generic -O2 -pipe -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong"
CXXFLAGS="-march=pentium4 -mtune=generic -O2 -pipe"
CXXFLAGS="$CFLAGS"
LDFLAGS="-pipe -Wl,--no-seh -Wl,--large-address-aware"
elif [[ "$MSYSTEM" == "CLANG64" ]]; then
CARCH="x86_64"
@@ -67,7 +67,7 @@ elif [[ "$MSYSTEM" == "CLANG64" ]]; then
CXX="clang++"
CPPFLAGS="-D__USE_MINGW_ANSI_STDIO=1"
CFLAGS="-march=nocona -msahf -mtune=generic -O2 -pipe -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong"
CXXFLAGS="-march=nocona -msahf -mtune=generic -O2 -pipe"
CXXFLAGS="$CFLAGS"
LDFLAGS="-pipe"
elif [[ "$MSYSTEM" == "CLANG32" ]]; then
CARCH="i686"
@@ -79,7 +79,7 @@ elif [[ "$MSYSTEM" == "CLANG32" ]]; then
CXX="clang++"
CPPFLAGS="-D__USE_MINGW_ANSI_STDIO=1"
CFLAGS="-march=pentium4 -mtune=generic -O2 -pipe -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong"
CXXFLAGS="-march=pentium4 -mtune=generic -O2 -pipe"
CXXFLAGS="$CFLAGS"
LDFLAGS="-pipe -Wl,--no-seh -Wl,--large-address-aware"
elif [[ "$MSYSTEM" == "CLANGARM64" ]]; then
CARCH="aarch64"
@@ -91,7 +91,7 @@ elif [[ "$MSYSTEM" == "CLANGARM64" ]]; then
CXX="clang++"
CPPFLAGS="-D__USE_MINGW_ANSI_STDIO=1"
CFLAGS="-O2 -pipe -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong"
CXXFLAGS="-O2 -pipe"
CXXFLAGS="$CFLAGS"
LDFLAGS="-pipe"
elif [[ "$MSYSTEM" == "UCRT64" ]]; then
CARCH="x86_64"
@@ -103,7 +103,7 @@ elif [[ "$MSYSTEM" == "UCRT64" ]]; then
CXX="g++"
CPPFLAGS="-D__USE_MINGW_ANSI_STDIO=1"
CFLAGS="-march=nocona -msahf -mtune=generic -O2 -pipe -Wp,-D_FORTIFY_SOURCE=2 -fstack-protector-strong"
CXXFLAGS="-march=nocona -msahf -mtune=generic -O2 -pipe"
CXXFLAGS="$CFLAGS"
LDFLAGS="-pipe"
else
echo "Unsupported MSYSTEM: $MSYSTEM"