JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

openblas: disable some hardening flags

Browse Source
This commit is contained in:
Thomas Tuegel 2016-10-20 16:37:50 -05:00
parent 9cd8b4e2d7
commit a58ec829e4
No known key found for this signature in database
GPG Key ID: 22CBF5249D4B4D59
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pkgs/development/libraries/science/math/openblas/default.nix
View File

@ -34,6 +34,21 @@ stdenv.mkDerivation {
inherit blas64;
# Some hardening features are disabled due to sporadic failures in
# OpenBLAS-based programs. The problem may not be with OpenBLAS itself, but
# with how these flags interact with hardening measures used downstream.
# In either case, OpenBLAS must only be used by trusted code--it is
# inherently unsuitable for security-conscious applications--so there should
# be no objection to disabling these hardening measures.
hardeningDisable = [
# don't modify or move the stack
"stackprotector" "pic"
# don't alter index arithmetic
"strictoverflow"
# don't interfere with dynamic target detection.
"relro" "bindnow"
];
nativeBuildInputs = optionals stdenv.isDarwin [coreutils] ++ [gfortran perl which];
makeFlags =