Merge pull request #660 from wlemkows/add-compiler-flags

Add strongly recommended security compiler flags

Author: pbalcer

CMakeLists.txt

@@ -57,8 +57,11 @@ if(NOT MSVC)
     add_compile_options(-fPIC -Wall -Wpedantic
         $<$<CXX_COMPILER_ID:GNU>:-fdiagnostics-color=always>
         $<$<CXX_COMPILER_ID:Clang,AppleClang>:-fcolor-diagnostics>)
+    if (CMAKE_BUILD_TYPE STREQUAL "Release")
+        add_compile_options(-D_FORTIFY_SOURCE=2)
+    endif()
     if(UR_DEVELOPER_MODE)
-        add_compile_options(-Werror -fno-omit-frame-pointer)
+        add_compile_options(-Werror -fno-omit-frame-pointer -fstack-protector-strong)
     endif()
     # Determine if libstdc++ is being used.
     check_cxx_source_compiles("
@@ -81,7 +84,7 @@ elseif(MSVC)
     add_compile_options(/MP /W3 /MD$<$<CONFIG:Debug>:d>)
 
     if(UR_DEVELOPER_MODE)
-        add_compile_options(/WX)
+        add_compile_options(/WX /GS)
     endif()
 endif()