pxcloud/spice
5
0
Fork 0
mirror of https://gitlab.uni-freiburg.de/opensourcevdi/spice synced 2026-01-04 00:06:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Use hardened linker flags if available

Browse Source 
This commit reuse several macros from libvirt to test for
support for "-Wl,-z -Wl,relro", "-Wl,-z -Wl,now" and
"-Wl,--no-copy-dt-needed-entries", and use them if available.
This commit is contained in:
Christophe Fergeau 2013-10-10 11:17:52 +02:00
parent f78f1ae61b
commit ceb672bf85
4 changed files with 71 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
configure.ac
View File

@ -434,6 +434,8 @@ dnl ===========================================================================
dnl check compiler flags
SPICE_COMPILE_WARNINGS
LIBVIRT_LINKER_RELRO
LIBVIRT_LINKER_NO_INDIRECT
# use ximage.h for win32 build if it is found (no package for mingw32 atm)
if test $os_win32 == "yes" ; then

32
m4/virt-linker-no-indirect.m4 Normal file
View File

@ -0,0 +1,32 @@
dnl
dnl Check for --no-copy-dt-needed-entries
dnl
dnl Copyright (C) 2013 Guido Günther <agx@sigxcpu.org>
dnl
dnl This library is free software; you can redistribute it and/or
dnl modify it under the terms of the GNU Lesser General Public
dnl License as published by the Free Software Foundation; either
dnl version 2.1 of the License, or (at your option) any later version.
dnl
dnl This library is distributed in the hope that it will be useful,
dnl but WITHOUT ANY WARRANTY; without even the implied warranty of
dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
dnl Lesser General Public License for more details.
dnl
dnl You should have received a copy of the GNU Lesser General Public
dnl License along with this library. If not, see
dnl <http://www.gnu.org/licenses/>.
dnl
AC_DEFUN([LIBVIRT_LINKER_NO_INDIRECT],[
AC_MSG_CHECKING([for how to avoid indirect lib deps])
NO_INDIRECT_LDFLAGS=
case `$LD --help 2>&1` in
*"--no-copy-dt-needed-entries"*)
NO_INDIRECT_LDFLAGS="-Wl,--no-copy-dt-needed-entries" ;;
esac
AC_SUBST([NO_INDIRECT_LDFLAGS])
AC_MSG_RESULT([$NO_INDIRECT_LDFLAGS])
])

35
m4/virt-linker-relro.m4 Normal file
View File

@ -0,0 +1,35 @@
dnl
dnl Check for -z now and -z relro linker flags
dnl
dnl Copyright (C) 2013 Red Hat, Inc.
dnl
dnl This library is free software; you can redistribute it and/or
dnl modify it under the terms of the GNU Lesser General Public
dnl License as published by the Free Software Foundation; either
dnl version 2.1 of the License, or (at your option) any later version.
dnl
dnl This library is distributed in the hope that it will be useful,
dnl but WITHOUT ANY WARRANTY; without even the implied warranty of
dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
dnl Lesser General Public License for more details.
dnl
dnl You should have received a copy of the GNU Lesser General Public
dnl License along with this library. If not, see
dnl <http://www.gnu.org/licenses/>.
dnl
AC_DEFUN([LIBVIRT_LINKER_RELRO],[
AC_MSG_CHECKING([for how to force completely read-only GOT table])
RELRO_LDFLAGS=
ld_help=`$LD --help 2>&1`
case $ld_help in
*"-z relro"*) RELRO_LDFLAGS="-Wl,-z -Wl,relro" ;;
esac
case $ld_help in
*"-z now"*) RELRO_LDFLAGS="$RELRO_LDFLAGS -Wl,-z -Wl,now" ;;
esac
AC_SUBST([RELRO_LDFLAGS])
AC_MSG_RESULT([$RELRO_LDFLAGS])
])

2
server/Makefile.am
View File

@ -21,6 +21,8 @@ lib_LTLIBRARIES = libspice-server.la
libspice_server_la_LDFLAGS = \
-version-info $(SPICE_LT_VERSION) \
-no-undefined \
$(RELRO_LDFLAGS) \
$(NO_INDIRECT_LDFLAGS) \
$(NULL)
if HAVE_LD_VERSION_SCRIPT