X-Git-Url: https://ruderich.org/simon/gitweb/?p=blhc%2Fblhc.git;a=blobdiff_plain;f=bin%2Fblhc;h=3ee85373e188ec7e52e18cce100b5294ebe77d5c;hp=e2658ae9f329f96959ef5b229d8035a6fa1f5172;hb=8bb0bc6382d4f8b3f957cd3ab0546e6cbb750beb;hpb=e3658a072c1a1b97147af5695b95817b4d5e4d9b diff --git a/bin/blhc b/bin/blhc index e2658ae..3ee8537 100755 --- a/bin/blhc +++ b/bin/blhc @@ -920,7 +920,7 @@ foreach my $file (@ARGV) { # Option or auto detected. if ($arch) { - # The following was partially copied from dpkg-dev 1.16.4.3 + # The following was partially copied from dpkg-dev 1.17.1 # (/usr/share/perl5/Dpkg/Vendor/Debian.pm, add_hardening_flags()), # copyright Raphaël Hertzog , Kees Cook # , Canonical, Ltd. licensed under GPL version 2 or @@ -930,7 +930,12 @@ foreach my $file (@ARGV) { my ($abi, $os, $cpu) = Dpkg::Arch::debarch_to_debtriplet($arch); # Disable unsupported hardening options. - if ($cpu =~ /^(?:ia64|alpha|mips|mipsel|hppa)$/ or $arch eq 'arm') { + if ($os !~ /^(?:linux|knetbsd|hurd)$/ or + $cpu =~ /^(?:hppa|mips|mipsel|avr32)$/) { + $harden_pie = 0; + } + if ($cpu =~ /^(?:ia64|alpha|mips|mipsel|hppa|arm64)$/ + or $arch eq 'arm') { $harden_stack = 0; } if ($cpu =~ /^(?:ia64|hppa|avr32)$/) { @@ -972,8 +977,8 @@ foreach my $file (@ARGV) { # Stores normal CFLAGS when @cflags_ada are temporarily used. my @cflags_backup; - # Ada CFLAGS. - my @cflags_ada = @cflags; + # Ada CFLAGS, only set if ada is used. + my @cflags_ada; # Ada doesn't support format hardening flags, see #680117 for more # information. Filter them out if ada is used. if ($ada and $harden_format) {