Always build with -fhardened if the compiler supports it

This enables all manner of highly useful safety checks that we generally want enabled.
rpm-software-management · Nov 14, 2024 · e4b2c63 · e4b2c63
1 parent 6ba8b6b
commit e4b2c63
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -421,8 +421,8 @@ if (ENABLE_ASAN OR ENABLE_UBSAN)
 	add_compile_options(-fno-omit-frame-pointer)
 endif()
 
-# try to ensure some compiler sanity
-foreach (flag -fno-strict-overflow -fno-delete-null-pointer-checks)
+# try to ensure some compiler sanity and hardening options where supported
+foreach (flag -fno-strict-overflow -fno-delete-null-pointer-checks -fhardened)
 	check_c_compiler_flag(${flag} found)
 	if (found)
 		add_compile_options(${flag})