From 77372e1a94b3fb21aa9bf0bfb256e7e51e3f41d3 Mon Sep 17 00:00:00 2001 From: dengzhongyuan Date: Tue, 1 Jul 2025 16:30:42 +0800 Subject: [PATCH] fix: Enhance build configuration with security flags - Added compiler flags for stack protection and security options. - Introduced FORTIFY_SOURCE protection to improve code safety. bug: https://pms.uniontech.com/bug-view-321339.html --- deepin-picker.pro | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/deepin-picker.pro b/deepin-picker.pro index b0f2c22..0c42c42 100644 --- a/deepin-picker.pro +++ b/deepin-picker.pro @@ -22,6 +22,14 @@ versionAtLeast(QT_VERSION, 6.0.0) { CONFIG += link_pkgconfig CONFIG += c++11 +# 编译器标志 - 添加栈保护和安全选项 +QMAKE_CFLAGS += -g -Wall -fPIE -fstack-protector-strong -O2 +QMAKE_CXXFLAGS += -g -Wall -fPIE -Wno-error=deprecated-declarations -Wno-deprecated-declarations -fstack-protector-strong -O2 +QMAKE_LFLAGS += -g -Wall -Wl,--as-needed -pie -z noexecstack -z now + +# 添加 FORTIFY_SOURCE 保护 +DEFINES += _FORTIFY_SOURCE=2 + RESOURCES = deepin-picker.qrc # Input @@ -51,8 +59,6 @@ SOURCES += \ # QT += gui # QT += dbus -QMAKE_CXXFLAGS += -g - isEmpty(PREFIX){ PREFIX = /usr }