diff pipcl.py @ 33:c4daa0c83d64

Apply also -fstack-clash-protection and -fstack-protector-strong for all generated binaries. Only done if EXTRA_CHECKS is not empty and not 0.
author Franz Glasner <fzglas.hg@dom66.de>
date Sun, 21 Sep 2025 17:55:13 +0200
parents 72c1b70d4f5c
children 71bcc18e306f
line wrap: on
line diff
--- a/pipcl.py	Sun Sep 21 15:10:12 2025 +0200
+++ b/pipcl.py	Sun Sep 21 17:55:13 2025 +0200
@@ -1770,6 +1770,8 @@
         if os.environ.get('EXTRA_CHECKS', '1') != '0':
             general_flags += ' -fno-delete-null-pointer-checks'
             general_flags += ' -Werror=implicit-function-declaration'
+            general_flags += ' -fstack-clash-protection'
+            general_flags += ' -fstack-protector-strong'
 
         py_limited_api3 = f'-DPy_LIMITED_API={py_limited_api2}' if py_limited_api2 else ''