From 557f3bd6c2a97bfa607780d778d9fb8f1c588930 Mon Sep 17 00:00:00 2001
From: Daniel Verkamp <daniel.verkamp@intel.com>
Date: Tue, 13 Oct 2015 10:04:04 -0700
Subject: [PATCH] build: enable -fstack-protector

Change-Id: I2ba23c48ee8b9048022cff6cc861e990fd1ff570
Signed-off-by: Daniel Verkamp <daniel.verkamp@intel.com>
---
 mk/spdk.common.mk | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/mk/spdk.common.mk b/mk/spdk.common.mk
index 2d3ab68dc..8ee29c482 100644
--- a/mk/spdk.common.mk
+++ b/mk/spdk.common.mk
@@ -47,6 +47,9 @@ COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m6
 
 COMMON_CFLAGS += -Wformat -Wformat-security -Wformat-nonliteral
 
+# Enable stack buffer overflow checking
+COMMON_CFLAGS += -fstack-protector
+
 # Enable full RELRO - no lazy relocation (resolve everything at load time).
 # This allows the GOT to be made read-only early in the loading process.
 LDFLAGS += -Wl,-z,relro,-z,now