commit dff05e151c11b98ad0b0bcacd0a1012a33e2d02d
author Soby Mathew <soby.mathew@arm.com> Tue Dec 31 16:30:17 2024 +0000
committer Soby Mathew <soby.mathew@arm.com> Thu Jan 02 11:46:55 2025 +0000
tree 787ff609a13fdbbc3667de22f87fea6c4648e112
parent a3e58e99e72f0d66fe37d775840e7e83ed82fc0d

build: add Wstrict-overflow and FORTIFY_SOURCE options

This patch adds further compiler options related to security to
RMM build options. The `-D_FORTIFY_SOURCE=2` is added mainly
for future proofing as RMM does not link against glibc today
but may do so in future.

Change-Id: I711135491a17cd6f11da72e1b6c701c149f017aa
Signed-off-by: Soby Mathew <soby.mathew@arm.com>

toolchains/common.cmake

diff --git a/toolchains/common.cmake b/toolchains/common.cmake
index 295bed1..fe2f19c 100644
--- a/toolchains/common.cmake
+++ b/toolchains/common.cmake
@@ -14,8 +14,9 @@
     string(APPEND CMAKE_${language}_FLAGS_INIT "-fno-common ")
     string(APPEND CMAKE_${language}_FLAGS_INIT "-ffunction-sections ")
     string(APPEND CMAKE_${language}_FLAGS_INIT "-fdata-sections ")
-    string(APPEND CMAKE_${language}_FLAGS_INIT "-Wall -Werror ")
+    string(APPEND CMAKE_${language}_FLAGS_INIT "-Wall -Werror -Wstrict-overflow ")
     string(APPEND CMAKE_${language}_FLAGS_INIT "-gdwarf-4 ")
+    string(APPEND CMAKE_${language}_FLAGS_INIT "-D_FORTIFY_SOURCE=2 ")
     string(APPEND CMAKE_${language}_FLAGS_DEBUG_INIT "-Og -Wnull-dereference ")
     string(APPEND CMAKE_${language}_FLAGS_RELEASE_INIT "-g ")
 endforeach()