diff options
| author | Kees Cook <kees@outflux.net> | 2013-10-22 11:23:51 -0400 |
|---|---|---|
| committer | Peter Jones <pjones@redhat.com> | 2013-10-22 11:23:51 -0400 |
| commit | a0df78b73f922bde50e753d46e9276777bf883ac (patch) | |
| tree | 97744865a450c24431d7594eeb0e5c6a98d7f419 /Makefile | |
| parent | ee4deae045c984e265a30c42e85a267e14e84680 (diff) | |
| download | efi-boot-shim-a0df78b73f922bde50e753d46e9276777bf883ac.tar.gz efi-boot-shim-a0df78b73f922bde50e753d46e9276777bf883ac.zip | |
additional bounds-checking on section sizes
This adds additional bounds-checking on the section sizes. Also adds
-Wsign-compare to the Makefile and replaces some signed variables with
unsigned counteparts for robustness.
Signed-off-by: Kees Cook <kees@ubuntu.com>
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -16,7 +16,8 @@ EFI_LDS = elf_$(ARCH)_efi.lds DEFAULT_LOADER := \\\\grub.efi CFLAGS = -ggdb -O0 -fno-stack-protector -fno-strict-aliasing -fpic \ - -fshort-wchar -Wall -Werror -mno-red-zone -maccumulate-outgoing-args \ + -fshort-wchar -Wall -Wsign-compare -Werror \ + -mno-red-zone -maccumulate-outgoing-args \ -mno-mmx -mno-sse -fno-builtin \ "-DDEFAULT_LOADER=L\"$(DEFAULT_LOADER)\"" \ "-DDEFAULT_LOADER_CHAR=\"$(DEFAULT_LOADER)\"" \ |