[patch] Stop CMake from adding compiler option -D_FORTIFY_SOURCE=2

yubihsm-shell-2.4.0-remove-hardcoded-compiler-opts.patch (text/plain), 1018 bytes, created by Linus Nordberg on 2024-07-06 19:36:37 UTC

diff -ru yubihsm-shell-2.4.0-orig/cmake/SecurityFlags.cmake yubihsm-shell-2.4.0/cmake/SecurityFlags.cmake
--- yubihsm-shell-2.4.0-orig/cmake/SecurityFlags.cmake	2023-01-21 21:29:44.000000000 +0100
+++ yubihsm-shell-2.4.0/cmake/SecurityFlags.cmake	2024-07-06 19:47:10.316666675 +0200
@@ -4,7 +4,7 @@
     CMAKE_C_COMPILER_ID STREQUAL "AppleClang" OR
     CMAKE_C_COMPILER_ID STREQUAL "GNU")
 
-    add_compile_options (-Wall -Wextra -Werror)
+    add_compile_options (-Wall -Wextra)
     add_compile_options (-Wformat -Wformat-nonliteral -Wformat-security)
     add_compile_options (-Wshadow)
     add_compile_options (-Wcast-qual)
@@ -12,10 +12,6 @@
     add_compile_options (-Wbad-function-cast)
     add_compile_options (-pedantic -pedantic-errors)
     add_compile_options (-fpie -fpic)
-    if (NOT FUZZ)
-        add_compile_options(-O2)
-        add_definitions (-D_FORTIFY_SOURCE=2)
-    endif ()
 
     check_c_compiler_flag("-fstack-protector-all" HAVE_STACK_PROTECTOR_ALL)
     if (HAVE_STACK_PROTECTOR_ALL)