configure.ac: Remove --param=ssp-buffer-size=1.

-fstack-protector-all already protects all functions.

diff --git a/configure.ac b/configure.ac
index e2f54801c5cd1efa769e038dd1edc30a1e4a8bc4..3da89e81f4525dc9107a3115a7828923b5f07e03 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -29,7 +29,7 @@ if test "x$GCC" = xyes; then
     CFLAGS="-Wno-error=int-to-pointer-cast $CFLAGS"
     CPPFLAGS="-D_XOPEN_SOURCE=500 $CPPFLAGS"
     # Additional hardening flags.
-    CFLAGS="-fPIE -fstack-protector-all --param=ssp-buffer-size=1 -Wformat -Werror=format-security $CFLAGS"
+    CFLAGS="-fPIE -fstack-protector-all -Wformat -Werror=format-security $CFLAGS"
     CPPFLAGS="-D_FORTIFY_SOURCE=2 $CPPFLAGS"
     LDFLAGS="-fPIE -pie -Wl,-z,relro -Wl,-z,now $LDFLAGS"
 fi