guix: enable SSP for RISC-V glibc (2.27)

Pass `--enable-stack-protector=all` when building the glibc used for the
RISC-V toolchain, to enable stack smashing protection on all functions,
in the glibc code.
This commit is contained in:
fanquake 2022-06-21 20:09:47 +01:00
parent 62c864605a
commit 3897a131d0
No known key found for this signature in database
GPG Key ID: 2EEB9F5CC09526C1

View File

@ -520,6 +520,9 @@ inspecting signatures in Mach-O binaries.")
(define (make-glibc-without-werror glibc)
(package-with-extra-configure-variable glibc "enable_werror" "no"))
(define (make-glibc-with-stack-protector glibc)
(package-with-extra-configure-variable glibc "--enable-stack-protector" "all"))
(define-public glibc-2.24
(package
(inherit glibc-2.31)
@ -607,7 +610,7 @@ inspecting signatures in Mach-O binaries.")
((string-contains target "-linux-")
(list (cond ((string-contains target "riscv64-")
(make-bitcoin-cross-toolchain target
#:base-libc (make-glibc-without-werror glibc-2.27/bitcoin-patched)))
#:base-libc (make-glibc-with-stack-protector (make-glibc-without-werror glibc-2.27/bitcoin-patched))))
(else
(make-bitcoin-cross-toolchain target)))))
((string-contains target "darwin")