2c41b8e4f3
* Build dlls with INTEGRITYCHECK flag if ENABLE_INTEGRITYCHECK=ON INTEGRITYCHECK flag enforces digital signature before loading the binary in Windows. Also, refine /guard:cf flag enabling - MSCV, Intel, clang compilers does support /guard:cf.
51 lines
2.3 KiB
CMake
51 lines
2.3 KiB
CMake
# Copyright (C) 2018-2020 Intel Corporation
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
if (CMAKE_BUILD_TYPE STREQUAL "Release")
|
|
if(UNIX)
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -Wformat -Wformat-security")
|
|
if (NOT ENABLE_SANITIZER)
|
|
# ASan does not support fortification https://github.com/google/sanitizers/issues/247
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -D_FORTIFY_SOURCE=2")
|
|
endif()
|
|
if(NOT APPLE)
|
|
set(CMAKE_EXE_LINKER_FLAGS_RELEASE "${CMAKE_EXE_LINKER_FLAGS_RELEASE} -pie")
|
|
endif()
|
|
|
|
if(CMAKE_CXX_COMPILER_ID STREQUAL "GNU")
|
|
set(IE_LINKER_FLAGS "${IE_LINKER_FLAGS} -z noexecstack -z relro -z now")
|
|
if(CMAKE_CXX_COMPILER_VERSION VERSION_LESS 4.9)
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -fstack-protector-all")
|
|
else()
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -fstack-protector-strong")
|
|
endif()
|
|
if (NOT ENABLE_SANITIZER)
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -s")
|
|
endif()
|
|
elseif(CMAKE_CXX_COMPILER_ID MATCHES "^(Apple)?Clang$")
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -fstack-protector-all")
|
|
elseif(CMAKE_CXX_COMPILER_ID STREQUAL "Intel")
|
|
if (NOT ENABLE_SANITIZER)
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -Wl,--strip-all")
|
|
endif()
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} -fstack-protector-strong")
|
|
set(IE_LINKER_FLAGS "${IE_LINKER_FLAGS} -z noexecstack -z relro -z now")
|
|
endif()
|
|
else()
|
|
if(CMAKE_CXX_COMPILER_ID STREQUAL "MSVC")
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} /sdl")
|
|
endif()
|
|
set(IE_C_CXX_FLAGS "${IE_C_CXX_FLAGS} /guard:cf")
|
|
if(ENABLE_INTEGRITYCHECK)
|
|
set(CMAKE_SHARED_LINKER_FLAGS_RELEASE "${CMAKE_SHARED_LINKER_FLAGS_RELEASE} /INTEGRITYCHECK")
|
|
endif()
|
|
endif()
|
|
|
|
set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${IE_C_CXX_FLAGS}")
|
|
set(CMAKE_CXX_FLAGS "${CMAKE_CXX_FLAGS} ${IE_C_CXX_FLAGS}")
|
|
set(CMAKE_SHARED_LINKER_FLAGS_RELEASE "${CMAKE_SHARED_LINKER_FLAGS_RELEASE} ${IE_LINKER_FLAGS}")
|
|
set(CMAKE_MODULE_LINKER_FLAGS_RELEASE "${CMAKE_MODULE_LINKER_FLAGS_RELEASE} ${IE_LINKER_FLAGS}")
|
|
set(CMAKE_EXE_LINKER_FLAGS_RELEASE "${CMAKE_EXE_LINKER_FLAGS_RELEASE} ${IE_LINKER_FLAGS}")
|
|
endif()
|