mirror
/
mongo
mirror of https://github.com/mongodb/mongo
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SERVER-114828 turn FORTIFY_SOURCE on for clang (#44778) 

GitOrigin-RevId: 0c452fe4e2be4dc5243f4ac11fc3c16168da9cfc
This commit is contained in:
Daniel Moody 2025-12-04 12:15:27 -06:00 committed by MongoDB Bot
parent d1997c02bd
commit c38285332a
2 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
bazel/config/BUILD.bazel
View File

@ -416,6 +416,15 @@ selects.config_setting_group(
], ],
) )
# opt=on || (opt=auto && !dbg)
selects.config_setting_group(
name = "opt_on_linux",
match_all = [
":opt_on",
"@platforms//os:linux",
],
)
# opt=off || (opt=auto && dbg) # opt=off || (opt=auto && dbg)
selects.config_setting_group( selects.config_setting_group(
name = "opt_off", name = "opt_off",

9
bazel/toolchains/cc/mongo_defines.bzl
View File

@ -49,11 +49,8 @@ ENTERPRISE_DEFINES = select({
"//conditions:default": [], "//conditions:default": [],
}) })
# Fortify only possibly makes sense on POSIX systems, and we know that clang is FORTIFY_DEFINE = select({
# not a valid combination: "//bazel/config:opt_on_linux": ["_FORTIFY_SOURCE=3"],
# http://lists.llvm.org/pipermail/cfe-dev/2015-November/045852.html
GCC_OPT_DEFINES = select({
"//bazel/config:gcc_opt": ["_FORTIFY_SOURCE=2"],
"//conditions:default": [], "//conditions:default": [],
}) })
@ -102,7 +99,7 @@ MONGO_GLOBAL_DEFINES = (
UNDEFINED_SANITIZER_DEFINES + UNDEFINED_SANITIZER_DEFINES +
GLIBCXX_DEBUG_DEFINES + GLIBCXX_DEBUG_DEFINES +
TCMALLOC_DEFINES + TCMALLOC_DEFINES +
GCC_OPT_DEFINES + FORTIFY_DEFINE +
BOOST_DEFINES + BOOST_DEFINES +
ABSEIL_DEFINES + ABSEIL_DEFINES +
PCRE2_DEFINES + PCRE2_DEFINES +