diff options
| author | Manuel Bentele | 2020-10-20 15:31:52 +0200 |
|---|---|---|
| committer | Manuel Bentele | 2020-10-20 15:31:52 +0200 |
| commit | 85c3fe47292f4e4e47a1f58f1347cb1f6d03b37e (patch) | |
| tree | d8d7cf3d229bec1ec0b94747b5f427fd6bd6f063 /CMakeLists.txt | |
| parent | [BUILD] do not stop Release build if repository is dirty but warn (diff) | |
| download | dnbd3-85c3fe47292f4e4e47a1f58f1347cb1f6d03b37e.tar.gz dnbd3-85c3fe47292f4e4e47a1f58f1347cb1f6d03b37e.tar.xz dnbd3-85c3fe47292f4e4e47a1f58f1347cb1f6d03b37e.zip | |
[BUILD] add option to build the dnbd3-server with afl-fuzz support
The afl-fuzz support for the dnbd3-server requires an AFL C compiler
like afl-gcc and can be enabled with the CMake option DNBD3_SERVER_AFL.
Diffstat (limited to 'CMakeLists.txt')
| -rw-r--r-- | CMakeLists.txt | 17 |
1 files changed, 12 insertions, 5 deletions
diff --git a/CMakeLists.txt b/CMakeLists.txt index 4bcdc10..f2485de 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -16,7 +16,7 @@ OPTION(DNBD3_SERVER_FUSE "Enable FUSE-Integration for dnbd3-server" OFF) OPTION(DNBD3_SERVER_AFL "Build dnbd3-server for usage with afl-fuzz" OFF) OPTION(DNBD3_SERVER_DEBUG_LOCKS "Add lock debugging code to dnbd3-server" OFF) OPTION(DNBD3_SERVER_DEBUG_THREADS "Add thread debugging code to dnbd3-server" OFF) -OPTION(DNBD3_RELEASE_HARDENING "Harden dnbd3 programs in Release build configuration" OFF) +OPTION(DNBD3_RELEASE_HARDEN "Compile dnbd3 programs in Release build with code hardening options" OFF) # set supported build configurations set(CMAKE_CONFIGURATION_TYPES Debug Release) @@ -89,10 +89,17 @@ set(CMAKE_C_FLAGS_RELEASE "-Wno-error") set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -g -Og -DDEBUG") set(CMAKE_C_FLAGS_RELEASE "${CMAKE_C_FLAGS_RELEASE} -O3 -DNDEBUG") -if(DNBD3_RELEASE_HARDENING) - # harden Release builds with specific C flags - set(CMAKE_C_FLAGS_RELEASE "${CMAKE_C_FLAGS_RELEASE} -D_FORTIFY_SOURCE=2 -fstack-protector-strong -fstack-clash-protection -mfunction-return=thunk -mindirect-branch=thunk") -endif(DNBD3_RELEASE_HARDENING) +if(DNBD3_RELEASE_HARDEN AND CMAKE_BUILD_TYPE MATCHES "Release") + # harden builds with specific C flags + set(CMAKE_C_FLAGS_RELEASE "${CMAKE_C_FLAGS_RELEASE} -D_FORTIFY_SOURCE=2 -fstack-protector-all -fstack-clash-protection -mfunction-return=thunk -mindirect-branch=thunk") + # set specific hardened linker flags + set(CMAKE_EXE_LINKER_FLAGS "${CMAKE_EXE_LINKER_FLAGS} -Wl,-z,relro,-z,now,-z,defs -pie") + # print status message of configuration + message(STATUS "Set compilation of DNBD3 with hardened code options - done") +else(DNBD3_RELEASE_HARDEN AND CMAKE_BUILD_TYPE MATCHES "Release") + # print status message of disabled configuration + message(STATUS "Disabled compilation of DNBD3 with hardened code options - done") +endif(DNBD3_RELEASE_HARDEN AND CMAKE_BUILD_TYPE MATCHES "Release") # add all dnbd3 related projects from the source code directory add_subdirectory(src) |