CMakeLists.txt: add -mmitigate-rop to security flags if found

This is GCC/x86/x86_64 only
2018-08-07 13:05:52 +00:00 · 2018-08-07 13:05:52 +00:00 · 9e6c7784ea
parent 0dddfeacc9
commit 9e6c7784ea
1 changed files with 3 additions and 0 deletions
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@ -572,6 +572,9 @@ else()
  add_c_flag_if_supported(-fstack-protector-strong C_SECURITY_FLAGS)
  add_cxx_flag_if_supported(-fstack-protector-strong CXX_SECURITY_FLAGS)

+  add_c_flag_if_supported(-mmitigate-rop C_SECURITY_FLAGS)
+  add_cxx_flag_if_supported(-mmitigate-rop CXX_SECURITY_FLAGS)
+
  # linker
  if (NOT WIN32)
    # Windows binaries die on startup with PIE