CMakeLists.txt: add -mmitigate-rop to security flags if found

This is GCC/x86/x86_64 only
6 years ago · 8bbef9d942
parent 7605881b73
commit 8bbef9d942
1 changed files with 3 additions and 0 deletions
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@ -562,6 +562,9 @@ else()
  add_c_flag_if_supported(-fstack-protector-strong C_SECURITY_FLAGS)
  add_cxx_flag_if_supported(-fstack-protector-strong CXX_SECURITY_FLAGS)

+  add_c_flag_if_supported(-mmitigate-rop C_SECURITY_FLAGS)
+  add_cxx_flag_if_supported(-mmitigate-rop CXX_SECURITY_FLAGS)
+
  # linker
  if (NOT WIN32)
    # Windows binaries die on startup with PIE