From b736e3bc8e0f0ef9dbe4431f737eb2630fc2c68d Mon Sep 17 00:00:00 2001
From: "Jason S. Ninneman" <jsn@mbar.us>
Date: Fri, 14 Jul 2017 19:52:20 -0700
Subject: [PATCH] Deploy maximum "fortified source" and stack protection.

---
 Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 8819291..a353532 100644
--- a/Makefile
+++ b/Makefile
@@ -8,7 +8,7 @@ VERS=$(shell sed -n <NEWS '/^[0-9]/s/:.*//p' | head -1)
 .PHONY: check coverage
 
 CC?=gcc
-CCFLAGS+=-std=c99 -D_DEFAULT_SOURCE -DVERSION=\"$(VERS)\" -O2
+CCFLAGS+=-std=c99 -D_DEFAULT_SOURCE -DVERSION=\"$(VERS)\" -O2 -D_FORTIFY_SOURCE=2 -fstack-protector-all
 LIBS=$(shell pkg-config --libs libedit)
 INC+=$(shell pkg-config --cflags libedit)
 
@@ -117,7 +117,7 @@ linty: CCFLAGS += -Winit-self
 linty: CCFLAGS += -Wpointer-arith
 linty: advent cheat
 
-debug: CCFLAGS += -O0 --coverage -ggdb
+debug: CCFLAGS += -O0 --coverage -ggdb -U_FORTIFY_SOURCE
 debug: linty
 
 CSUPPRESSIONS = --suppress=missingIncludeSystem --suppress=invalidscanf
-- 
2.31.1