build: supply -Wl,--high-entropy-va

This should enable high-entropy ASLR on 64-bit targets, for better mitigation of exploits.
milochen0418 · Dec 1, 2017 · 8a93215 · 8a93215
1 parent 41b2842
commit 8a93215
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/configure.ac b/configure.ac
@@ -443,6 +443,7 @@ if test x$use_hardening != xno; then
     # These are only available on Windows.
     AX_CHECK_LINK_FLAG([[-Wl,--dynamicbase]], [HARDENED_LDFLAGS="$HARDENED_LDFLAGS -Wl,--dynamicbase"],[AC_MSG_ERROR(Cannot enable --dynamicbase)])
     AX_CHECK_LINK_FLAG([[-Wl,--nxcompat]], [HARDENED_LDFLAGS="$HARDENED_LDFLAGS -Wl,--nxcompat"],[AC_MSG_ERROR(Cannot enable --nxcompat)])
+    AX_CHECK_LINK_FLAG([[-Wl,--high-entropy-va]], [HARDENED_LDFLAGS="$HARDENED_LDFLAGS -Wl,--high-entropy-va"],[AC_MSG_ERROR(Cannot enable ASLR)])
   fi
 
   case $host in