commit 69f8d5df72b6bd9c39c3a262ae0ed07f2cd566e9
author Paul Jakma <paul@jakma.org> Wed Mar 08 17:15:58 2017 +0000
committer Paul Jakma <paul@quagga.net> Thu Mar 09 18:03:55 2017 +0000
tree e518d5653d5e6368ade460659b05c9ef974a5edb
parent ca7399f165f892620cbabdeb2b62cf792a6fc9d6

configure: Add commonly used GCC security flags

configure.ac

diff --git a/configure.ac b/configure.ac
index b9dcddc..0bfdde6 100755
--- a/configure.ac
+++ b/configure.ac
@@ -193,10 +193,14 @@
         		}')" = "x1" ; then
         	AC_MSG_RESULT([yes])
         	AC_C_FLAG([-fstack-protector-strong])
+        	AC_C_FLAG([--param=ssp-buffer-size=4])
         else
         	AC_MSG_RESULT([no])
         	AC_MSG_WARN([upgrade to libtool >= 2.4.6!])
         fi
+        AC_C_FLAG([-D_FORTIFY_SOURCE=2])
+        AC_C_FLAG([-Wformat])
+        AC_C_FLAG([-Wformat-security])
         AC_C_FLAG([-fpie])
         AC_C_FLAG([-fno-omit-frame-pointer])
         AC_C_FLAG([-Wall])