kotatogram/cmake_helpers
1
0
Fork 0
Code Issues Activity

Set hardening flags only for non-packaged/special target builds

Browse source
This commit is contained in:
Ilya Fedin 2022-10-05 14:24:09 +04:00 • committed by John Preston
parent 74fbd92f9f
commit 3c98147427
1 changed files with 22 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
options_linux.cmake
View file

@ -6,14 +6,8 @@
target_compile_options(common_options target_compile_options(common_options
INTERFACE INTERFACE
$<IF:$<CONFIG:Debug>,,-fno-strict-aliasing>
)
target_compile_options_if_exists(common_options
INTERFACE
-fstack-protector-all
-fstack-clash-protection
-fPIC -fPIC
$<$<NOT:$<CONFIG:Debug>>:-fno-strict-aliasing>
-pipe -pipe
-Wall -Wall
-Wextra -Wextra
@ -26,12 +20,6 @@ INTERFACE
-Wno-deprecated-declarations # TODO: Remove when there will be no Qt 5 support -Wno-deprecated-declarations # TODO: Remove when there will be no Qt 5 support
) )
target_compile_definitions(common_options
INTERFACE
$<IF:$<CONFIG:Debug>,,_FORTIFY_SOURCE=2>
_GLIBCXX_ASSERTIONS
)
target_link_options_if_exists(common_options target_link_options_if_exists(common_options
INTERFACE INTERFACE
-pthread -pthread
@ -41,17 +29,16 @@ INTERFACE
if (DESKTOP_APP_SPECIAL_TARGET) if (DESKTOP_APP_SPECIAL_TARGET)
target_compile_options(common_options target_compile_options(common_options
INTERFACE INTERFACE
$<IF:$<CONFIG:Debug>,,-Ofast> $<$<NOT:$<CONFIG:Debug>>:-Ofast>
-Werror -Werror
$<$<NOT:$<CONFIG:Debug>>:-g>
$<$<NOT:$<CONFIG:Debug>>:-flto>
) )
target_link_options(common_options target_link_options(common_options
INTERFACE INTERFACE
$<IF:$<CONFIG:Debug>,,-Ofast> $<$<NOT:$<CONFIG:Debug>>:-flto>
$<$<NOT:$<CONFIG:Debug>>:-fuse-linker-plugin>
) )
target_compile_options(common_options INTERFACE $<IF:$<CONFIG:Debug>,,-g -flto>)
target_link_options(common_options INTERFACE $<IF:$<CONFIG:Debug>,,-g -flto -fuse-linker-plugin>)
endif() endif()
if (NOT DESKTOP_APP_USE_PACKAGED) if (NOT DESKTOP_APP_USE_PACKAGED)
@ -76,10 +63,26 @@ if (NOT DESKTOP_APP_USE_PACKAGED)
INTERFACE INTERFACE
-rdynamic -rdynamic
-fwhole-program -fwhole-program
)
endif()
if (NOT DESKTOP_APP_USE_PACKAGED OR DESKTOP_APP_SPECIAL_TARGET)
target_compile_options_if_exists(common_options
INTERFACE
-fstack-protector-all
-fstack-clash-protection
)
target_link_options(common_options
INTERFACE
-Wl,-z,relro -Wl,-z,relro
-Wl,-z,now -Wl,-z,now
# -pie # https://gitlab.gnome.org/GNOME/nautilus/-/issues/1601 # -pie # https://gitlab.gnome.org/GNOME/nautilus/-/issues/1601
) )
target_compile_definitions(common_options
INTERFACE
$<$<NOT:$<CONFIG:Debug>>:_FORTIFY_SOURCE=2>
_GLIBCXX_ASSERTIONS
)
endif() endif()
if (NOT DESKTOP_APP_DISABLE_JEMALLOC) if (NOT DESKTOP_APP_DISABLE_JEMALLOC)