diff options
| author | Franz Pletz <fpletz@fnordicwalking.de> | 2016-03-09 10:08:07 +0100 |
|---|---|---|
| committer | Franz Pletz <fpletz@fnordicwalking.de> | 2016-03-09 10:08:07 +0100 |
| commit | 514a478e614f0ac439f84f72e2f9814f2bc1d01f (patch) | |
| tree | ba0dd7060c1bb946152be44f831e25b03877251a /pkgs/build-support/cc-wrapper | |
| parent | 9a5b070b4591a554b9cf36490d54c0ae28f5c22e (diff) | |
| download | nixlib-514a478e614f0ac439f84f72e2f9814f2bc1d01f.tar nixlib-514a478e614f0ac439f84f72e2f9814f2bc1d01f.tar.gz nixlib-514a478e614f0ac439f84f72e2f9814f2bc1d01f.tar.bz2 nixlib-514a478e614f0ac439f84f72e2f9814f2bc1d01f.tar.lz nixlib-514a478e614f0ac439f84f72e2f9814f2bc1d01f.tar.xz nixlib-514a478e614f0ac439f84f72e2f9814f2bc1d01f.tar.zst nixlib-514a478e614f0ac439f84f72e2f9814f2bc1d01f.zip | |
cc-wrapper: Fix if syntax
Diffstat (limited to 'pkgs/build-support/cc-wrapper')
| -rw-r--r-- | pkgs/build-support/cc-wrapper/add-hardening | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/pkgs/build-support/cc-wrapper/add-hardening b/pkgs/build-support/cc-wrapper/add-hardening index abfd49766db2..82477c6b7d9d 100644 --- a/pkgs/build-support/cc-wrapper/add-hardening +++ b/pkgs/build-support/cc-wrapper/add-hardening @@ -14,39 +14,39 @@ if [[ ! $hardeningDisable == "all" ]]; then if [[ ! "${hardeningDisable[@]}" =~ "$flag" ]]; then case $flag in fortify) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling fortify; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling fortify; fi hardeningCFlags+=('-O2' '-D_FORTIFY_SOURCE=2') ;; stackprotector) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling stackprotector; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling stackprotector; fi hardeningCFlags+=('-fstack-protector-strong' '--param ssp-buffer-size=4') ;; pie) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling CFlags -fPIE; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling CFlags -fPIE; fi hardeningCFlags+=('-fPIE') if [[ ! ("$*" =~ " -shared " || "$*" =~ " -static ") ]]; then - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling LDFlags -pie; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling LDFlags -pie; fi hardeningLDFlags+=('-pie') fi ;; pic) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling pic; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling pic; fi hardeningCFlags+=('-fPIC') ;; strictoverflow) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling strictoverflow; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling strictoverflow; fi hardeningCFlags+=('-fno-strict-overflow') ;; format) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling format; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling format; fi hardeningCFlags+=('-Wformat' '-Wformat-security' '-Werror=format-security') ;; relro) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling relro; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling relro; fi hardeningLDFlags+=('-z relro') ;; bindnow) - if [ -n "$NIX_DEBUG" ]; then echo HARDENING: enabling bindnow; fi + if [[ -n "$NIX_DEBUG" ]]; then echo HARDENING: enabling bindnow; fi hardeningLDFlags+=('-z now') ;; *) |