- (dtucker) [configure.ac] Enable -fstack-protector-all on systems where

   gcc supports it.  ok djm@

diff --git a/ChangeLog b/ChangeLog
index 23aa2c7a6d8f276bde4d75d7026e3fa501e2fae3..b9b6ffc6b245c97d4867690f9fdf5358a3c93f3f 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+20071202
+ - (dtucker) [configure.ac] Enable -fstack-protector-all on systems where
+   gcc supports it.  ok djm@
+
 20071030
  - (djm) OpenBSD CVS Sync
    - djm@cvs.openbsd.org 2007/10/29 23:49:41

diff --git a/configure.ac b/configure.ac
index f46f2c28854dde35f6e1aabbc3e21efe75d280f1..5772d0a1c68d1995bca1e3192fe238ec9e1798fb 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -105,6 +105,15 @@ if test "$GCC" = "yes" || test "$GCC" = "egcs"; then
                *) ;;
        esac
 
+       AC_MSG_CHECKING(if $GCC understands -fstack-protector-all)
+       saved_CFLAGS="$CFLAGS"
+       CFLAGS="$CFLAGS -fstack-protector-all"
+       AC_TRY_COMPILE([], [ int main(void){return 0;} ],
+           [ AC_MSG_RESULT(yes) ],
+           [ AC_MSG_RESULT(no)
+             CFLAGS="$saved_CFLAGS" ]
+       )
+
        if test -z "$have_llong_max"; then
                # retry LLONG_MAX with -std=gnu99, needed on some Linuxes
                unset ac_cv_have_decl_LLONG_MAX