about summary refs log tree commit diff
path: root/pkgs/stdenv/generic
diff options
context:
space:
mode:
authorRobert Hensing <robert@roberthensing.nl>2024-03-12 18:41:57 +0100
committerRobert Hensing <robert@roberthensing.nl>2024-03-12 18:41:57 +0100
commitcac23248b1f873d10f4604b0f0facea81987367b (patch)
tree38767c21a3f06bc64616e181a09803aeac09be21 /pkgs/stdenv/generic
parent464d8c4a6c6282ea51e80b695f4d0eb39dd24b96 (diff)
downloadnixlib-cac23248b1f873d10f4604b0f0facea81987367b.tar
nixlib-cac23248b1f873d10f4604b0f0facea81987367b.tar.gz
nixlib-cac23248b1f873d10f4604b0f0facea81987367b.tar.bz2
nixlib-cac23248b1f873d10f4604b0f0facea81987367b.tar.lz
nixlib-cac23248b1f873d10f4604b0f0facea81987367b.tar.xz
nixlib-cac23248b1f873d10f4604b0f0facea81987367b.tar.zst
nixlib-cac23248b1f873d10f4604b0f0facea81987367b.zip
make-derivation.nix: Float out knownHardeningFlags
Diffstat (limited to 'pkgs/stdenv/generic')
-rw-r--r--pkgs/stdenv/generic/make-derivation.nix27
1 files changed, 14 insertions, 13 deletions
diff --git a/pkgs/stdenv/generic/make-derivation.nix b/pkgs/stdenv/generic/make-derivation.nix
index 36d34b796f90..b86cfd1f5927 100644
--- a/pkgs/stdenv/generic/make-derivation.nix
+++ b/pkgs/stdenv/generic/make-derivation.nix
@@ -110,6 +110,20 @@ let
           makeDerivationExtensible (self: attrs // (if builtins.isFunction f0 || f0?__functor then f self attrs else f0)))
       attrs;
 
+  knownHardeningFlags = [
+    "bindnow"
+    "format"
+    "fortify"
+    "fortify3"
+    "pic"
+    "pie"
+    "relro"
+    "stackprotector"
+    "strictoverflow"
+    "trivialautovarinit"
+    "zerocallusedregs"
+  ];
+
   makeDerivationArgument =
 
 
@@ -235,19 +249,6 @@ let
     # disabling fortify implies fortify3 should also be disabled
     then unique (hardeningDisable ++ [ "fortify3" ])
     else hardeningDisable;
-  knownHardeningFlags = [
-    "bindnow"
-    "format"
-    "fortify"
-    "fortify3"
-    "pic"
-    "pie"
-    "relro"
-    "stackprotector"
-    "strictoverflow"
-    "trivialautovarinit"
-    "zerocallusedregs"
-  ];
   defaultHardeningFlags =
     (if stdenv.hasCC then stdenv.cc else {}).defaultHardeningFlags or
       # fallback safe-ish set of flags