about summary refs log tree commit diff
path: root/pkgs/build-support/cc-wrapper/add-hardening.sh
AgeCommit message (Expand)AuthorFilesLines
2024-02-24cc-wrapper: add trivialautovarinit hardening flag supportRobert Scott1-1/+5
2024-01-20cc-wrapper: add zerocallusedregs hardening flagRobert Scott1-1/+5
2023-12-09mkDerivation, bintools-wrapper: move defaultHardeningFlags determination to b...Robert Scott1-1/+1
2023-09-28cc-wrapper: ensure NIX_HARDENING_ENABLE fortify3 implies fortify tooRobert Scott1-1/+8
2023-08-19cc-wrapper: add fortify flags after invocation args, not beforeRobert Scott1-11/+16
2023-07-17cc-wrapper: use -fwrapv instead of -fno-strict-overflow in clangTheodore Ni1-2/+12
2023-06-23build-support: Use response-expanded params in pie testPeter Waller1-1/+1
2023-02-21cc-wrapper: fix inverted logic around fortify & fortify3 mutual exclusionRobert Scott1-1/+1
2023-01-24cc-wrapper: add support for fortify3 flagRobert Scott1-3/+24
2022-10-01cc-wrapper/add-hardening.sh: always unset _FORTIFY_SOURCE before re-setting itSergei Trofimovich1-1/+3
2021-09-20{cc,binutils}-wrapper: match leading/trailing argumentsRyan Burns1-1/+1
2021-09-20cc-wrapper: ensure PIE flags precede PIC flagsRyan Burns1-2/+3
2020-05-12*-wrapper; Switch from `infixSalt` to `suffixSalt`John Ericson1-1/+1
2018-04-14{cc,bintools}-wrapper: fix removal of unsupported hardening flagsPiotr Bogdan1-1/+1
2018-04-11Revert "Revert "Merge pull request #28029 from cstrahan/hardening-fix""John Ericson1-55/+60
2017-12-13bintools-wrapper: InitJohn Ericson1-10/+0
2017-09-26treewide: Use `(( "${NIX_DEBUG:-0}" >= 1) ))` consistentlyJohn Ericson1-11/+11
2017-09-07Revert "Merge pull request #28557 from obsidiansystems/binutils-wrapper"Eelco Dolstra1-0/+10
2017-09-01binutils-wrapper: InitJohn Ericson1-10/+0
2017-08-30mkDerivation, cc-wrapper: Check hardening flag validity in NixJohn Ericson1-1/+2
2017-08-30cc-wrapper: Remove redundant hardeningJohn Ericson1-0/+1
2017-08-07cc-wrapper: Use `set -u` throughoutJohn Ericson1-19/+21
2017-08-04cc-wrapper: Pass shellcheck and other cleanupsJohn Ericson1-8/+22
2016-08-24cc-wrapper: fix detection of unsupported linker flagsFranz Pletz1-8/+2
2016-08-23cc-wrapper: check ld hardening capabilities in stdenvFranz Pletz1-2/+6
2016-08-23add-hardening.sh: fix quotationRobin Gloster1-2/+2
2016-08-23cc-wrapper: add-{flags,hardening} -> add-{flags,hardening}.shRobin Gloster1-0/+61