Update: Add hopefully more secure compiler flags by default.

Use the "-Wl" for specifying the linker flags.
- Make sure "now", "relro", and "nodlopen" are set.

Add FORTIFY_SOURCE set to 3.

Add stack-clash-protection and strict-flex-arrays set to 3.

This project is designed around NULL checks.
- Make sure the no-delete-null-pointer-checks flag is set to prevent the compiler from removing these security/integrity checks.

Use stack-protector-strong rather than stack-protector for test flags.
- Future versions may enable stack-protector-strong by default for regular compiling.

diff --git a/build/level_0/settings b/build/level_0/settings
index c870f370904d930dc94a5e253f0716f893743dd0..23624e28583a1d5a8e21286733817ef876e86cb8 100644 (file)
--- a/build/level_0/settings
+++ b/build/level_0/settings
@@ -158,10 +158,13 @@ defines-clang -D_clang_not_a_compile_time_constant_workaround_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -fstack-protector -Wall
+flags-test -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 
 flags_library -fPIC

diff --git a/build/level_1/settings b/build/level_1/settings
index 9395ecc0013a0e11b5811c7a092aafcc679831fc..4ce1564cb46c742eaf0a73c5564d425485bfabe9 100644 (file)
--- a/build/level_1/settings
+++ b/build/level_1/settings
@@ -87,10 +87,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -fstack-protector -Wall
+flags-test -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 
 flags_library -fPIC

diff --git a/build/level_2/settings b/build/level_2/settings
index dec81589360f29dee2c2b26a040ab52c6c5cd929..08ac74907ff85fd693766440478338659d76b7ea 100644 (file)
--- a/build/level_2/settings
+++ b/build/level_2/settings
@@ -84,10 +84,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -fstack-protector -Wall
+flags-test -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 
 flags_library -fPIC

diff --git a/build/monolithic/settings b/build/monolithic/settings
index 60a04cc15bbc50a38053994cebd8d8f3701dfe7e..bf7fde0a78918b11d0c4ab70f507ef97e5b6b85e 100644 (file)
--- a/build/monolithic/settings
+++ b/build/monolithic/settings
@@ -201,10 +201,13 @@ defines-clang -D_clang_not_a_compile_time_constant_workaround_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -fstack-protector -Wall
+flags-test -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 
 flags_library -fPIC

diff --git a/build/stand_alone/byte_dump.settings b/build/stand_alone/byte_dump.settings
index a2e05d3a64ebe0f7dd88cf60a4059d5062e3e0f2..51a2edbea359100d35a8fabf0f90019a2244d4e5 100644 (file)
--- a/build/stand_alone/byte_dump.settings
+++ b/build/stand_alone/byte_dump.settings
@@ -79,7 +79,10 @@ defines -include sources/c/config.h -I sources/c/
 defines -D_di_libcap_ -D_di_pthread_support_
 defines-clang -D_clang_not_a_compile_time_constant_workaround_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
 flags-fanalyzer -fanalyzer
 

diff --git a/build/stand_alone/fake.settings b/build/stand_alone/fake.settings
index 872b63be47f96bb00fcd18a397e3988b4bab7257..0d14dd0b179b331bb64d55e6d9e25c957e136366 100644 (file)
--- a/build/stand_alone/fake.settings
+++ b/build/stand_alone/fake.settings
@@ -123,10 +123,13 @@ defines-clang -D_clang_not_a_compile_time_constant_workaround_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-main -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-main
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 
 flags_library -fPIC

diff --git a/build/stand_alone/firewall.settings b/build/stand_alone/firewall.settings
index a24372ddcce3b974a32ee12682ccc6078e400c0f..9b1e59342f1642b117a735511119e1066f7f4b18 100644 (file)
--- a/build/stand_alone/firewall.settings
+++ b/build/stand_alone/firewall.settings
@@ -96,7 +96,10 @@ defines -include sources/c/config.h -I sources/c/
 defines -D_libcap_legacy_only_ -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 defines-clang -D_clang_not_a_compile_time_constant_workaround_
 
-flags -O2 -z now -g -pthread -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
 flags-fanalyzer -fanalyzer
 

diff --git a/build/stand_alone/utf8.settings b/build/stand_alone/utf8.settings
index c775e2c74c0e2389b41aa369821c79a54c1d0ce0..428ac0c7767cac465061146c4ab4168112c4f063 100644 (file)
--- a/build/stand_alone/utf8.settings
+++ b/build/stand_alone/utf8.settings
@@ -81,7 +81,10 @@ defines -include sources/c/config.h -I sources/c/
 defines -D_di_libcap_ -D_di_pthread_support_
 defines-clang -D_clang_not_a_compile_time_constant_workaround_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
 flags-fanalyzer -fanalyzer
 

diff --git a/level_0/f_abstruse/data/build/settings b/level_0/f_abstruse/data/build/settings
index cc8c83a68327188c75188039c21e7ee13052a93e..dc35106c0d99b073512b318d9c2e3e57aa398d4e 100644 (file)
--- a/level_0/f_abstruse/data/build/settings
+++ b/level_0/f_abstruse/data/build/settings
@@ -60,9 +60,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_account/data/build/settings b/level_0/f_account/data/build/settings
index d8ab74b7a0aab6ebdc1523832ea59c41b4a79e21..37d924e6d90d8121bb741249e6c0c1cdbca8eafc 100644 (file)
--- a/level_0/f_account/data/build/settings
+++ b/level_0/f_account/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_capability/data/build/settings b/level_0/f_capability/data/build/settings
index 1af1f293917847ebf341597395e117d199140d16..7cdf3e956fe0785632b98b11d1e41ed97ef02e92 100644 (file)
--- a/level_0/f_capability/data/build/settings
+++ b/level_0/f_capability/data/build/settings
@@ -64,9 +64,12 @@ environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY L
 #defines -D_di_libcap_
 defines -D_libcap_legacy_only_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_color/data/build/settings b/level_0/f_color/data/build/settings
index 12dfbc244314bee82316bf1461a688006f9bfe2d..e5db0fd564c422753f19dbe8e8368482bbb91894 100644 (file)
--- a/level_0/f_color/data/build/settings
+++ b/level_0/f_color/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_compare/data/build/settings b/level_0/f_compare/data/build/settings
index 8d7bf7bad4f9925afb3dc177c78c9aee2dda1c92..338eb3e74375c6a2be1fb68718e3ccfe3249340b 100644 (file)
--- a/level_0/f_compare/data/build/settings
+++ b/level_0/f_compare/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_console/data/build/settings b/level_0/f_console/data/build/settings
index f1e6bb5ef676ab565349f82c879dec6e04d8127f..7515c7e536046063add60e70d8cfe8af7d2acc9f 100644 (file)
--- a/level_0/f_console/data/build/settings
+++ b/level_0/f_console/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_control_group/data/build/settings b/level_0/f_control_group/data/build/settings
index a7608abdeaf47863ece04e136390dbcf98e8f340..81639b85f309b523477c4377229a5cf492aad9a3 100644 (file)
--- a/level_0/f_control_group/data/build/settings
+++ b/level_0/f_control_group/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_conversion/data/build/settings b/level_0/f_conversion/data/build/settings
index 9a7edf7420c75a2a8981639c09c9fb35ea930636..602e36a04d9662109c481cfe689f2881de98bd21 100644 (file)
--- a/level_0/f_conversion/data/build/settings
+++ b/level_0/f_conversion/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_directory/data/build/settings b/level_0/f_directory/data/build/settings
index d0d2d6ff020ac32e17802ac0376a595e3aed30e9..3e7d90f1a893872343df04884b5449ff9684a82d 100644 (file)
--- a/level_0/f_directory/data/build/settings
+++ b/level_0/f_directory/data/build/settings
@@ -62,9 +62,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_environment/data/build/settings b/level_0/f_environment/data/build/settings
index 0857e116d28b98c7d2b6156050d2a57e71a2c1ef..0afce0672f975f88b37dc5be9b29948c674618aa 100644 (file)
--- a/level_0/f_environment/data/build/settings
+++ b/level_0/f_environment/data/build/settings
@@ -63,9 +63,12 @@ environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY L
 
 #defines -D_di_libcap_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_execute/data/build/settings b/level_0/f_execute/data/build/settings
index 81a3f9b8d11ff8c268dad0695802f6291b7d22a0..735dea896a9664a6985258aa0e0d08381eb1991c 100644 (file)
--- a/level_0/f_execute/data/build/settings
+++ b/level_0/f_execute/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_file/data/build/settings b/level_0/f_file/data/build/settings
index d594be05cfac9209a5d35dc40b06f75503c8d037..c893ca058fb8df0a78a6cc92c12435d1e76d39f6 100644 (file)
--- a/level_0/f_file/data/build/settings
+++ b/level_0/f_file/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 #defines -D_f_file_rename_use_renameat2_

diff --git a/level_0/f_fss/data/build/settings b/level_0/f_fss/data/build/settings
index bf77e7a0650be4ec3b4fc5d854eddbeb5c50ea3d..989d46c45a74d3438a182c01259d59f2b5ccb513 100644 (file)
--- a/level_0/f_fss/data/build/settings
+++ b/level_0/f_fss/data/build/settings
@@ -60,9 +60,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_iki/data/build/settings b/level_0/f_iki/data/build/settings
index 9cbb7ef36e83041bb340088cff4cfe13f0248aed..71d804286be48ac9b420832d6e542bfc32e08833 100644 (file)
--- a/level_0/f_iki/data/build/settings
+++ b/level_0/f_iki/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_limit/data/build/settings b/level_0/f_limit/data/build/settings
index 8321be6fa423f2fc9a4e1d089c4d47df0c56ca1c..1ae147cd636dfa42153d1b4cb1ae0b05702e51aa 100644 (file)
--- a/level_0/f_limit/data/build/settings
+++ b/level_0/f_limit/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_memory/data/build/settings b/level_0/f_memory/data/build/settings
index df7c0545e554d247cb0915e105f6b0afdf77da96..5093953757ef309b66a43e062dc503d1bca34aa0 100644 (file)
--- a/level_0/f_memory/data/build/settings
+++ b/level_0/f_memory/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_network/data/build/settings b/level_0/f_network/data/build/settings
index cb8d96bfecb12f0f2d7599c7d00aeaf381bc00d5..490563b68c52bb2a5fb57814144809706e0852dd 100644 (file)
--- a/level_0/f_network/data/build/settings
+++ b/level_0/f_network/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_parse/data/build/settings b/level_0/f_parse/data/build/settings
index 203bf02182023ed88b5ccafabb5efc5f529792d4..aa9217b2d1792730c918aacf06746e5978ec58f6 100644 (file)
--- a/level_0/f_parse/data/build/settings
+++ b/level_0/f_parse/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_path/data/build/settings b/level_0/f_path/data/build/settings
index 56deccc99651bb0fe5ac6ca2d285355a9fdf183c..2adea9c90efd0f8440e4a2e4b5a7e33031bbcdfd 100644 (file)
--- a/level_0/f_path/data/build/settings
+++ b/level_0/f_path/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_pipe/data/build/settings b/level_0/f_pipe/data/build/settings
index 3dbd7426b908755c9937ebe994a22cd4d744f02c..519eac29b3a8433b1db989841305727a5a509625 100644 (file)
--- a/level_0/f_pipe/data/build/settings
+++ b/level_0/f_pipe/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_print/data/build/settings b/level_0/f_print/data/build/settings
index 98c470347fb771d04b922f3ff133378f0235d6f1..d8dec3fbc66adf3d13f26c1032da909caadc5f18 100644 (file)
--- a/level_0/f_print/data/build/settings
+++ b/level_0/f_print/data/build/settings
@@ -63,9 +63,12 @@ environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY L
 
 defines-clang -D_clang_not_a_compile_time_constant_workaround_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_random/data/build/settings b/level_0/f_random/data/build/settings
index d4f56f48ccd05ca6477f70b6d6ddcc685d4614e0..f7d55a60e310f1f46f102c62ea0e1a1873844f49 100644 (file)
--- a/level_0/f_random/data/build/settings
+++ b/level_0/f_random/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_rip/data/build/settings b/level_0/f_rip/data/build/settings
index 1f1486321fbe397346ed9e37e7113988bca92b68..d1a28b3ad85128296fa41bf6f523b21a0cf6b41b 100644 (file)
--- a/level_0/f_rip/data/build/settings
+++ b/level_0/f_rip/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_serialize/data/build/settings b/level_0/f_serialize/data/build/settings
index a3ea03d3bf10df2e449ab4ada1bcef709b064bf6..cf307f2d286fe43fe5dba3ea03180b8ff5c1ed24 100644 (file)
--- a/level_0/f_serialize/data/build/settings
+++ b/level_0/f_serialize/data/build/settings
@@ -52,9 +52,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_signal/data/build/settings b/level_0/f_signal/data/build/settings
index 8cacb8c638820910fb4e013ac9e031631a28d24b..efe8bca1618ddb1458adca665d58be4eaaaa72e6 100644 (file)
--- a/level_0/f_signal/data/build/settings
+++ b/level_0/f_signal/data/build/settings
@@ -60,9 +60,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall -Wno-missing-braces
+flags-test -O0 -fstack-protector-strong -Wall -Wno-missing-braces
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_socket/data/build/settings b/level_0/f_socket/data/build/settings
index 801ce3f7ca336c628775de95c0f6592f718dc1bd..590858a1b801cbbd4b52556ee73eaff561d28aed 100644 (file)
--- a/level_0/f_socket/data/build/settings
+++ b/level_0/f_socket/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_status/data/build/settings b/level_0/f_status/data/build/settings
index e7b3f52b5e3bbeb671183786d25a3b986b0cda08..15808181b803271138a541d186990ef5c7237145 100644 (file)
--- a/level_0/f_status/data/build/settings
+++ b/level_0/f_status/data/build/settings
@@ -58,9 +58,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_status_string/data/build/settings b/level_0/f_status_string/data/build/settings
index 55ea400abb835c2250205d368cb649fe3ebdb387..4ad28e46e36f86c272e40c78b2eae5464bff5323 100644 (file)
--- a/level_0/f_status_string/data/build/settings
+++ b/level_0/f_status_string/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_string/data/build/settings b/level_0/f_string/data/build/settings
index 0e7b5b4541200ea6d479098b68577bb5bfeeb71b..748559b3e0ee32c70c7ac2fd24c40cb966144862 100644 (file)
--- a/level_0/f_string/data/build/settings
+++ b/level_0/f_string/data/build/settings
@@ -74,9 +74,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_thread/data/build/settings b/level_0/f_thread/data/build/settings
index a2ba2533cc7be7e193efa56fca76700ca4cfc806..79d4f3963a9e6ce01075fd23a6f642ae8911db16 100644 (file)
--- a/level_0/f_thread/data/build/settings
+++ b/level_0/f_thread/data/build/settings
@@ -65,10 +65,13 @@ environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY L
 
 defines -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_time/data/build/settings b/level_0/f_time/data/build/settings
index 6779d2cfb468a51284cbf665d4fa3741537ae88d..e81209dfca2796f052eae671a50d118a30d43756 100644 (file)
--- a/level_0/f_time/data/build/settings
+++ b/level_0/f_time/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_type/data/build/settings b/level_0/f_type/data/build/settings
index e26151832f8ce015007893fc1009562ef774caab..57f1eb6c7eb000c87c1c40a27d2c9cfa534f493a 100644 (file)
--- a/level_0/f_type/data/build/settings
+++ b/level_0/f_type/data/build/settings
@@ -58,9 +58,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_type_array/data/build/settings b/level_0/f_type_array/data/build/settings
index 0c12db66a445730338646de9ed45e292c20e19f8..9cc2d1952d731b71f0533013958739e3415f544f 100644 (file)
--- a/level_0/f_type_array/data/build/settings
+++ b/level_0/f_type_array/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_0/f_utf/data/build/settings b/level_0/f_utf/data/build/settings
index d9a63b00dc0f2d8582576993fa38d0d228026638..1c5a85fc31d5b35fa6902d58447ef6b6ee8d7632 100644 (file)
--- a/level_0/f_utf/data/build/settings
+++ b/level_0/f_utf/data/build/settings
@@ -63,9 +63,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_control_group/data/build/settings b/level_1/fl_control_group/data/build/settings
index de36fba2ae1e6536c66ca6695f724f1f52f22d1b..ec2a4c52b0ff0774153f9ee3dcec329dcb744b42 100644 (file)
--- a/level_1/fl_control_group/data/build/settings
+++ b/level_1/fl_control_group/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_conversion/data/build/settings b/level_1/fl_conversion/data/build/settings
index 32aa0fc5b08674d9de4b51d03c6a0155e072e3ce..5a04bbf64afede0f67874c7fd864181318fa7074 100644 (file)
--- a/level_1/fl_conversion/data/build/settings
+++ b/level_1/fl_conversion/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_directory/data/build/settings b/level_1/fl_directory/data/build/settings
index 7cecb02596a8bc2b65982e9772bea5b594e729fa..94850fe3b48e5cb0dcff832ac893ca841dfd8afe 100644 (file)
--- a/level_1/fl_directory/data/build/settings
+++ b/level_1/fl_directory/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_environment/data/build/settings b/level_1/fl_environment/data/build/settings
index b7e1040134aa36f6be561dced3b8667c8e2af9df..5f9aa95d8266c449ae3319110eb1950908ce6083 100644 (file)
--- a/level_1/fl_environment/data/build/settings
+++ b/level_1/fl_environment/data/build/settings
@@ -60,9 +60,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_execute/data/build/settings b/level_1/fl_execute/data/build/settings
index f179e8d361c0bd1791c41c4d23fd5c7e47583526..56bf71454c08fa7bb9dc613209f23fe779fda7d0 100644 (file)
--- a/level_1/fl_execute/data/build/settings
+++ b/level_1/fl_execute/data/build/settings
@@ -65,10 +65,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_fss/data/build/settings b/level_1/fl_fss/data/build/settings
index 628963d865f88896484d176bd9320f66977555c5..d4d4ca8ecaa8ab8d542b31d6dd4a2b081f506b51 100644 (file)
--- a/level_1/fl_fss/data/build/settings
+++ b/level_1/fl_fss/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_fss/data/build/settings-tests b/level_1/fl_fss/data/build/settings-tests
index 3e5d6e2378a3bf0fb65dfe3fc5d8008ec193b804..78b410a838380e9718623ad961167f3e7fe0fc21 100644 (file)
--- a/level_1/fl_fss/data/build/settings-tests
+++ b/level_1/fl_fss/data/build/settings-tests
@@ -55,7 +55,10 @@ defines -Ibuild/includes
 defines_static -Lbuild/libraries/static
 defines_shared -Lbuild/libraries/shared
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
 flags-test -fstack-protector -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/

diff --git a/level_1/fl_iki/data/build/settings b/level_1/fl_iki/data/build/settings
index b8863faee55f8bc0859d75e4b4b010829cbeca56..ff0c6784b411404d5f6a0ecf03b17bd2db2cd2b4 100644 (file)
--- a/level_1/fl_iki/data/build/settings
+++ b/level_1/fl_iki/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_path/data/build/settings b/level_1/fl_path/data/build/settings
index c70331f6291fee2b74b0d1b23a48ca532a25510b..45e7a47cd829197198d969df80e8344a2cfaff31 100644 (file)
--- a/level_1/fl_path/data/build/settings
+++ b/level_1/fl_path/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_print/data/build/settings b/level_1/fl_print/data/build/settings
index 0c354ebaa4256f510f0ade0be3bf292ab177a8e6..5b2435df144ea3b721125cbedf4b9d8b6dd49311 100644 (file)
--- a/level_1/fl_print/data/build/settings
+++ b/level_1/fl_print/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_status_string/data/build/settings b/level_1/fl_status_string/data/build/settings
index 4ab0c010bc1aa297b047a46acd9f06314e53a721..56afbb6e2e115176d32b0e4b885d3891b1d76972 100644 (file)
--- a/level_1/fl_status_string/data/build/settings
+++ b/level_1/fl_status_string/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_1/fl_utf_file/data/build/settings b/level_1/fl_utf_file/data/build/settings
index 3161e30a07d1b088b551c10926273ec5a89cbea4..884d3d270d623bd1f64be687fe7976a51c79c5a5 100644 (file)
--- a/level_1/fl_utf_file/data/build/settings
+++ b/level_1/fl_utf_file/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_control_group/data/build/settings b/level_2/fll_control_group/data/build/settings
index 7661641b05a698ab369d854f09b488afbc492914..345c1282e4f8e76fab02854051279b2d50375686 100644 (file)
--- a/level_2/fll_control_group/data/build/settings
+++ b/level_2/fll_control_group/data/build/settings
@@ -60,9 +60,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_error/data/build/settings b/level_2/fll_error/data/build/settings
index 1c7daa347a079ca0a2e394c88f7bf2c5ae89cffe..bf752c4a06135f21cd03ad473e89f070f2851bbf 100644 (file)
--- a/level_2/fll_error/data/build/settings
+++ b/level_2/fll_error/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_execute/data/build/settings b/level_2/fll_execute/data/build/settings
index 9320de2142cb4a99b37b70bd1f364433f7e85741..ad7aca740c4ee5d43178e53c5cf668aef5aa9dcc 100644 (file)
--- a/level_2/fll_execute/data/build/settings
+++ b/level_2/fll_execute/data/build/settings
@@ -67,10 +67,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_file/data/build/settings b/level_2/fll_file/data/build/settings
index 73667359ccf0299ba3836351732f93565c00004f..3ce9e86ff274dc59c1ba8712a207937070b4714d 100644 (file)
--- a/level_2/fll_file/data/build/settings
+++ b/level_2/fll_file/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_fss/data/build/settings b/level_2/fll_fss/data/build/settings
index 80cf279b3b7ade5f034447a2bdac8eb6fcc0b59b..56fab1dfe527bcf8abc5b00cf34234a9839af379 100644 (file)
--- a/level_2/fll_fss/data/build/settings
+++ b/level_2/fll_fss/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_fss_status_string/data/build/settings b/level_2/fll_fss_status_string/data/build/settings
index be8bd2b161d9377276779a4fd040e90d793e2cf0..41fa3e327cfa30ec757ad6dfe4683ad8c4264d60 100644 (file)
--- a/level_2/fll_fss_status_string/data/build/settings
+++ b/level_2/fll_fss_status_string/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_iki/data/build/settings b/level_2/fll_iki/data/build/settings
index 8b9fb0f8961e009b5e62f258180dc7f4a6eebe12..cbed363e6965540a26f6b36efeb3c60a711c6ab9 100644 (file)
--- a/level_2/fll_iki/data/build/settings
+++ b/level_2/fll_iki/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_print/data/build/settings b/level_2/fll_print/data/build/settings
index bce236c72f6e4fa23adae6c0c424f93528a3156b..aa6cb55697cb7a1846d64286fbdccd0c2116507f 100644 (file)
--- a/level_2/fll_print/data/build/settings
+++ b/level_2/fll_print/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_2/fll_program/data/build/settings b/level_2/fll_program/data/build/settings
index 358dc1efe98082cab21d556163da0821855774c7..ce236e288a636eaa9d979dd73417ac574f0a204b 100644 (file)
--- a/level_2/fll_program/data/build/settings
+++ b/level_2/fll_program/data/build/settings
@@ -61,9 +61,12 @@ search_static yes
 environment PATH LD_LIBRARY_PATH
 environment LANG LC_ALL LC_COLLATE LC_CTYPE LC_FASTMSG LC_MESSAGES LC_MONETARY LC_NUMERIC LC_TIME LOCPATH NLSPATH
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 
 flags_library -fPIC

diff --git a/level_3/byte_dump/data/build/settings b/level_3/byte_dump/data/build/settings
index ca7f6fd101f9226bc1d3244c2a3dd1d729c05094..ebe63c3bd8d7328751ba170b03ca3fbd553b3df1 100644 (file)
--- a/level_3/byte_dump/data/build/settings
+++ b/level_3/byte_dump/data/build/settings
@@ -74,10 +74,13 @@ defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 defines-clang -D_clang_not_a_compile_time_constant_workaround_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/control/data/build/settings b/level_3/control/data/build/settings
index f60f7d211c47dff1c90a9e199fd7bcb274a34a7f..c503f6dc32c80a2afdd5be985df388a6025a9f34 100644 (file)
--- a/level_3/control/data/build/settings
+++ b/level_3/control/data/build/settings
@@ -73,10 +73,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/controller/data/build/settings b/level_3/controller/data/build/settings
index 02682a66f3775d7b55b3a7be705e42ab4ecf46ab..78ba70faedf9d1dda9af0e000d5488d097826c24 100644 (file)
--- a/level_3/controller/data/build/settings
+++ b/level_3/controller/data/build/settings
@@ -87,10 +87,13 @@ defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 defines-as_init -D_controller_as_init_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/fake/data/build/settings b/level_3/fake/data/build/settings
index 6b1aca28c6bd85e35cbdc783f797a214b32bc686..304b3f139064349f0b4329349d04839291434901 100644 (file)
--- a/level_3/fake/data/build/settings
+++ b/level_3/fake/data/build/settings
@@ -86,10 +86,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces -Wno-main
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-main
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/firewall/data/build/settings b/level_3/firewall/data/build/settings
index 5948f9e24d66f830337f10871476c2e08cf307d6..85af80ade04a7ce6262679a87f8e3f09272498b2 100644 (file)
--- a/level_3/firewall/data/build/settings
+++ b/level_3/firewall/data/build/settings
@@ -75,10 +75,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/fss_identify/data/build/settings b/level_3/fss_identify/data/build/settings
index bd2252ef63dfc68b5db51222ef5dd735298f59cb..30e54624f2b2226310f5dd53ba1d7991ab6f2435 100644 (file)
--- a/level_3/fss_identify/data/build/settings
+++ b/level_3/fss_identify/data/build/settings
@@ -73,10 +73,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/fss_read/data/build/settings b/level_3/fss_read/data/build/settings
index 185589a29b41ee73691de93753a2f1d341ddd968..984fdc04827199e9ba3105243adf1823038e974d 100644 (file)
--- a/level_3/fss_read/data/build/settings
+++ b/level_3/fss_read/data/build/settings
@@ -74,10 +74,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces -Wno-main
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-main
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/fss_write/data/build/settings b/level_3/fss_write/data/build/settings
index 4c1f0ba248e4a8bd57d1d001dcf2c16aa11bc1c8..5935921c372f895b06e9c3dd11bdd85080e5b919 100644 (file)
--- a/level_3/fss_write/data/build/settings
+++ b/level_3/fss_write/data/build/settings
@@ -74,10 +74,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/iki_read/data/build/settings b/level_3/iki_read/data/build/settings
index 318257b5dcd0dc3e97e6cf995c39c04b530ff039..315822f5f40c6752f4ae5d5e10d9dc752a8e97d8 100644 (file)
--- a/level_3/iki_read/data/build/settings
+++ b/level_3/iki_read/data/build/settings
@@ -73,10 +73,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/iki_write/data/build/settings b/level_3/iki_write/data/build/settings
index d33f76f3c3da87a1ad4db88ba9030e7d912c4adb..80c2e5e750035f521a22c9da2396c128e4450354 100644 (file)
--- a/level_3/iki_write/data/build/settings
+++ b/level_3/iki_write/data/build/settings
@@ -72,10 +72,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/status_code/data/build/settings b/level_3/status_code/data/build/settings
index 152c97d10fd0e2a60b2893de8d583a63bad214d6..bfa8c7578f857367771414e740ec27ddbcbbe5ed 100644 (file)
--- a/level_3/status_code/data/build/settings
+++ b/level_3/status_code/data/build/settings
@@ -75,10 +75,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/
 

diff --git a/level_3/utf8/data/build/settings b/level_3/utf8/data/build/settings
index 64feb960e4de799e43d98265d29664466c85dd73..ed238543399efae8e4628043af98b36f40a33862 100644 (file)
--- a/level_3/utf8/data/build/settings
+++ b/level_3/utf8/data/build/settings
@@ -73,10 +73,13 @@ defines -D_libcap_legacy_only_
 defines-threadless -D_di_thread_support_
 defines-thread -D_pthread_attr_unsupported_ -D_pthread_sigqueue_unsupported_
 
-flags -O2 -z now -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses -Wno-missing-braces
+flags -O2 -g -fdiagnostics-color=always -Wno-logical-not-parentheses -Wno-parentheses
+flags -fstack-clash-protection -fno-delete-null-pointer-checks -fstrict-flex-arrays=3
+flags -D_FORTIFY_SOURCE=3
+flags -Wl,-z,nodlopen -Wl,-z,noexecstack -Wl,-z,relro -Wl,-z,now
 flags-thread -pthread
 flags-clang -Wno-logical-op-parentheses
-flags-test -O0 -fstack-protector -Wall
+flags-test -O0 -fstack-protector-strong -Wall
 flags-fanalyzer -fanalyzer
 flags-coverage -O0 --coverage -fprofile-abs-path -fprofile-dir=build/coverage/