diff options
| author | Kees Cook <kees@outflux.net> | 2012-12-03 15:52:48 -0800 |
|---|---|---|
| committer | Peter Jones <pjones@redhat.com> | 2013-10-22 11:23:51 -0400 |
| commit | 21e40f0174814b3d91836e38c7cf95c8f2f1f3a4 (patch) | |
| tree | 97744865a450c24431d7594eeb0e5c6a98d7f419 /Makefile | |
| parent | baebb090ea1f65c205ac1fe2b83b42bb979a4907 (diff) | |
| download | efi-boot-shim-21e40f0174814b3d91836e38c7cf95c8f2f1f3a4.tar.gz efi-boot-shim-21e40f0174814b3d91836e38c7cf95c8f2f1f3a4.zip | |
additional bounds-checking on section sizes
This adds additional bounds-checking on the section sizes. Also adds
-Wsign-compare to the Makefile and replaces some signed variables with
unsigned counteparts for robustness.
Signed-off-by: Kees Cook <kees@ubuntu.com>
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -16,7 +16,8 @@ EFI_LDS = elf_$(ARCH)_efi.lds DEFAULT_LOADER := \\\\grub.efi CFLAGS = -ggdb -O0 -fno-stack-protector -fno-strict-aliasing -fpic \ - -fshort-wchar -Wall -Werror -mno-red-zone -maccumulate-outgoing-args \ + -fshort-wchar -Wall -Wsign-compare -Werror \ + -mno-red-zone -maccumulate-outgoing-args \ -mno-mmx -mno-sse -fno-builtin \ "-DDEFAULT_LOADER=L\"$(DEFAULT_LOADER)\"" \ "-DDEFAULT_LOADER_CHAR=\"$(DEFAULT_LOADER)\"" \ |