CmakeLists.txt: add some hardening options to CMAKE_C_FLAGS

These options (-fstack-protector --param=ssp-buffer-size=4) should not
affect the current code but it is useful to have them here for
reference.

diff --git a/CMakeLists.txt b/CMakeLists.txt
index be8e4e7..5d36d6c 100644 (file)
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -68,7 +68,8 @@ if (CMAKE_COMPILER_IS_GNUCC)
     -Wunreachable-code
     -Wunsafe-loop-optimizations
     -Wwrite-strings
     -Wunreachable-code
     -Wunsafe-loop-optimizations
     -Wwrite-strings

-    )
+    -fstack-protector
+    --param=ssp-buffer-size=4)

 endif()
 
 set(CMAKE_C_FLAGS_DEBUG "-g -DDEBUG=1 -Werror")
 endif()
 
 set(CMAKE_C_FLAGS_DEBUG "-g -DDEBUG=1 -Werror")