diff options
| -rw-r--r-- | dns/dnsmasq-devel/Makefile | 3 | ||||
| -rw-r--r-- | dns/dnsmasq/Makefile | 3 |
2 files changed, 4 insertions, 2 deletions
diff --git a/dns/dnsmasq-devel/Makefile b/dns/dnsmasq-devel/Makefile index fe6698992e0f..2d71c213b862 100644 --- a/dns/dnsmasq-devel/Makefile +++ b/dns/dnsmasq-devel/Makefile @@ -33,7 +33,8 @@ MAKE_ARGS= CC="${CC}" \ CFLAGS+= -Wall # https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html # Note there are ${ARCH}-dependent options below after .include <bsd.port.pre.mk> -CFLAGS+= -O2 -Wall -Wformat -Wformat=2 \ +# Note that these are enforced for now (2025-09-16), and we can't subject them to PIE/FORTIFY/SSP_UNSAFE or WITHOUT_ options for now. +CFLAGS+= -Wall -Wformat -Wformat=2 \ -Werror=format-security \ -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3 \ -fstrict-flex-arrays=3 \ diff --git a/dns/dnsmasq/Makefile b/dns/dnsmasq/Makefile index 2c34b08f2547..c0cb701dbee6 100644 --- a/dns/dnsmasq/Makefile +++ b/dns/dnsmasq/Makefile @@ -28,7 +28,8 @@ MAKE_ARGS= CC="${CC}" \ CFLAGS+= -Wall # https://best.openssf.org/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.html # Note there are ${ARCH}-dependent options below after .include <bsd.port.pre.mk> -CFLAGS+= -O2 -Wall -Wformat -Wformat=2 \ +# Note that these are enforced for now (2025-09-16), and we can't subject them to PIE/FORTIFY/SSP_UNSAFE or WITHOUT_ options for now. +CFLAGS+= -Wall -Wformat -Wformat=2 \ -Werror=format-security \ -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=3 \ -fstrict-flex-arrays=3 \ |