Chromium Code Reviews| Index: build/common.gypi |
| diff --git a/build/common.gypi b/build/common.gypi |
| index 01904f5478645cb3b9a1a1e6824584316948b86f..be91749ccdbc17b3fcbae9f4725185954efc9409 100644 |
| --- a/build/common.gypi |
| +++ b/build/common.gypi |
| @@ -2372,18 +2372,25 @@ |
| 'conditions': [ |
| ['os_posix==1', { |
| 'target_defaults': { |
| - 'cflags': [ |
| - # TODO(phajdan.jr): Use -fstack-protector-strong when our gcc |
| - # supports it. |
| - '-fstack-protector', |
| - '--param=ssp-buffer-size=4', |
| - ], |
| 'ldflags': [ |
| '-Wl,-z,now', |
| '-Wl,-z,relro', |
| ], |
| }, |
| }], |
| + ['os_posix==1 and chromeos==0', { |
| + # Chrome OS enables -fstack-protector-strong via its build wrapper, |
| + # and we want to avoid overriding this, so stack-protector is only |
| + # enabled when not building on Chrome OS. |
| + # TODO(phajdan.jr): Auto-detect use of -fstack-protector-strong instead |
|
Paweł Hajdan Jr.
2013/01/30 08:47:21
Generally we avoid auto-detection, so I'd say plea
keescook
2013/01/30 18:10:44
Done.
|
| + # of depending on chromeos build detection. |
| + 'target_defaults': { |
| + 'cflags': [ |
| + '-fstack-protector', |
| + '--param=ssp-buffer-size=4', |
| + ], |
| + }, |
| + }], |
| ['os_posix==1 and OS!="mac" and OS!="ios"', { |
| 'target_defaults': { |
| # Enable -Werror by default, but put it in a variable so it can |