Filter -fstack-protector out of cflags for nacl_helper_bootstrap

src/trusted/service_runtime/linux/nacl_bootstrap.gyp

 # Copyright (c) 2011 The Native Client Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 {
   'includes': [
     '../../../../build/common.gypi',
   ],
   'conditions': [
     ['target_arch=="x64"', {
@@ skipping 66 matching lines @@
         # to remove -f* flags, just in case some system's compiler
         # defaults to using PIC for everything.
         '-fno-pic', '-fno-PIC',
         '-fno-pie', '-fno-PIE',
       ],
       'cflags!': [
         # TODO(glider): -fasan is deprecated.
         '-fasan',
         '-faddress-sanitizer',
         '-w',
+        # We filter these out because release_extra_cflags or another
+        # such thing might be adding them in, and those options wind up
+        # coming after the -fno-stack-protector we added above.
+        '-fstack-protector',
+        '-fstack-protector-all',
       ],
       'conditions': [
         ['clang==1', {
           'cflags': [
             # Prevent llvm-opt from replacing my_bzero with a call
             # to memset
             '-ffreestanding',
             # But make its <limits.h> still work!
             '-U__STDC_HOSTED__', '-D__STDC_HOSTED__=1',
           ],
@@ skipping 77 matching lines @@
         'inputs': ['nacl_bootstrap_munge_phdr.py',
                    '<(PRODUCT_DIR)/nacl_bootstrap_munge_phdr',
                    '<(PRODUCT_DIR)/nacl_bootstrap_raw'],
         'outputs': ['<(PRODUCT_DIR)/nacl_helper_bootstrap'],
         'message': 'Munging ELF program header',
         'action': ['python', '<@(_inputs)', '<@(_outputs)']
       }],
     },
   ],
 }