mirror of
https://github.com/veracrypt/VeraCrypt
synced 2024-11-10 05:03:33 +01:00
Linux: Add linker flag for GCC version below 6.0 to improve ASLR security
Reported on https://sourceforge.net/p/veracrypt/discussion/technical/thread/90f967e642 reference: https://grsecurity.net/toolchain_necromancy_past_mistakes_haunting_aslr script to check: https://github.com/opensrcsec/paxtest/blob/master/contrib/check_align.sh
This commit is contained in:
parent
d7e442258a
commit
1ba6865ea1
@ -219,6 +219,12 @@ ifeq "$(shell uname -s)" "Linux"
|
||||
CXXFLAGS += -std=gnu++14
|
||||
endif
|
||||
|
||||
# Linked in GCC versions below 6 was setting large value for MAXPAGESIZE which is not good for ASLR security
|
||||
# So, we need to manually add the linker flag "-z max-page-size=4096" to set the maximum page size to 4KB
|
||||
# in order to improve ASLR security. Starting from GCC 6, the default value of MAXPAGESIZE is 4KB.
|
||||
ifeq ($(shell expr $(GCC_VERSION) \< 600), 1)
|
||||
LFLAGS += -Wl,-z,max-page-size=4096
|
||||
endif
|
||||
|
||||
ifeq "$(SIMD_SUPPORTED)" "1"
|
||||
CFLAGS += -msse2
|
||||
|
Loading…
Reference in New Issue
Block a user