Franz Pletz 3db93c351d cc-wrapper: add stack clash protection hardening flag ... Most Linux distributions are enabling this these days and it does protect against real world vulnerabilities as demonstrated by CVE-2018-16864 and CVE-2018-16865. Fix #53753. Information on llvm version support gleaned from 6609892a2d 68e07da3e5 092507a730 Information on gcc version support a lot harder to gather, but both 32bit and 64bit arm do appear to be supported based on the test suite.		2024-06-07 20:23:46 +01:00
..
add-clang-cc-cflags-before.sh	clang: don't set -march for overridden target	2024-03-01 09:51:49 +01:00
add-flags.sh	cc-wrapper: change cflags order from cc/crt1/libc to crt1/libc/cc	2022-02-20 10:45:45 +00:00
add-gnat-extra-flags.sh	cc-wrapper: Fix gnatmake wrapper	2023-01-07 18:32:12 +11:00
add-hardening.sh	cc-wrapper: add stack clash protection hardening flag	2024-06-07 20:23:46 +01:00
cc-wrapper.sh	cc-wrapper: Use MacOS compatible mktemp command	2023-10-05 10:44:34 +02:00
default.nix	wrapCC, wrapBintools: move expand-response-params bootstrapping out	2024-04-18 20:49:13 +02:00
fortran-hook.sh	mkDerivation, bintools-wrapper: move defaultHardeningFlags determination to bintools-wrapper	2023-12-09 16:30:45 +00:00
gnat-wrapper.sh	cc-wrapper: Wrap/link all other GNAT commands	2023-01-07 18:32:12 +11:00
go-wrapper.sh	gccgo: wrap go binary (#207670)	2023-01-20 14:31:54 +01:00
setup-hook.sh	mkDerivation, bintools-wrapper: move defaultHardeningFlags determination to bintools-wrapper	2023-12-09 16:30:45 +00:00