diff options
| author | Sebastian Kemper <sebastian_ml@gmx.net> | 2018-12-18 20:53:12 +0100 |
|---|---|---|
| committer | Sebastian Kemper <sebastian_ml@gmx.net> | 2018-12-18 20:57:47 +0100 |
| commit | c565ad271b5811be1d4aa1963326c8ec0d726b66 (patch) | |
| tree | 8bf59760c1c145df7f1e47e324a4d704d92832df /libs/sqlite3 | |
| parent | 1e5bc17eead54ee3469e9e6baa290cec34373d61 (diff) | |
sqlite3: remove $(FPIC)
Defaulting to -fPIC is a bad idea, especially for executables (here:
sqlite3-cli). In short, there are certain security implications as well
as overhead/performance penalties. Details see:
https://wiki.gentoo.org/wiki/Project:Hardened/Position_Independent_Code_internals
The configure script is able to detect the need for PIC and adds the
flag when needed anyway (when compiling the library).
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
Diffstat (limited to 'libs/sqlite3')
| -rw-r--r-- | libs/sqlite3/Makefile | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libs/sqlite3/Makefile b/libs/sqlite3/Makefile index 28020e3a2..71be4e189 100644 --- a/libs/sqlite3/Makefile +++ b/libs/sqlite3/Makefile @@ -75,7 +75,7 @@ $(call Package/sqlite3/Default/description) formats. endef -TARGET_CFLAGS += $(FPIC) \ +TARGET_CFLAGS += \ -DSQLITE_ENABLE_UNLOCK_NOTIFY=1 \ -DHAVE_ISNAN=1 \ -DHAVE_MALLOC_USABLE_SIZE=1 |