openblas: disable some hardening flags

This commit is contained in:
Thomas Tuegel 2016-10-20 16:37:50 -05:00
parent 9cd8b4e2d7
commit a58ec829e4
No known key found for this signature in database
GPG Key ID: 22CBF5249D4B4D59

View File

@ -34,6 +34,21 @@ stdenv.mkDerivation {
inherit blas64;
# Some hardening features are disabled due to sporadic failures in
# OpenBLAS-based programs. The problem may not be with OpenBLAS itself, but
# with how these flags interact with hardening measures used downstream.
# In either case, OpenBLAS must only be used by trusted code--it is
# inherently unsuitable for security-conscious applications--so there should
# be no objection to disabling these hardening measures.
hardeningDisable = [
# don't modify or move the stack
"stackprotector" "pic"
# don't alter index arithmetic
"strictoverflow"
# don't interfere with dynamic target detection.
"relro" "bindnow"
];
nativeBuildInputs = optionals stdenv.isDarwin [coreutils] ++ [gfortran perl which];
makeFlags =