HBSD: Use the hardened toolchain argument for multimedia/ffmpeg (!30) · Merge requests · HardenedBSD / Ports

Loic requested to merge loic/ports:ffmpeg into hardenedbsd/main Jan 02, 2022

Using the toolchain=hardened in CONFIGURE_ARGS allows to use the following options:

-U_FORTIFY_SOURCE
-D_FORTIFY_SOURCE=2
-fno-strict-overflow
-fstack-protector-all
-fPIE

For HardenedBSD, ffmpeg goes from Partial RELRO to Full RELRO and activate BIND_NOW. Notes, clang didn't really implement support for FORTIFY_SOURCE.

HBSD: Use the hardened toolchain argument for multimedia/ffmpeg