Skip to content

Commit fdaac2e

Browse files
committed
Run travis build with gcc-8 and dpkg-buildflags
Referring to https://wiki.debian.org/Hardening : "Several compile-time options (...) can be used to help harden a resulting binary against memory corruption attacks.." Debian uses a lot of hardening flags to build the packages. To catch issues early run a build with this flags using gcc-8 in travis as well.
1 parent 46f5263 commit fdaac2e

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

.travis.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,12 @@ matrix:
22
include:
33
- os: osx
44
compiler: clang
5+
- os: linux
6+
compiler: gcc-8
7+
env:
8+
- LDFLAGS="-Wl,-z,relro"
9+
- CFLAGS="-g -O2 -fstack-protector-strong -Wformat -Werror=format-security"
10+
- CPPFLAGS="-Wdate-time -D_FORTIFY_SOURCE=2"
511
- os: linux
612
compiler: gcc
713
env:
@@ -53,9 +59,12 @@ env:
5359

5460
addons:
5561
apt:
62+
sources:
63+
- ubuntu-toolchain-r-test
5664
packages:
5765
- musl-tools
5866
- indent
67+
- gcc-8
5968
homebrew:
6069
packages:
6170
- gnu-indent

0 commit comments

Comments
 (0)