From 6e7b7ac6ecd04f38d42969ea8aa4be32a44422e9 Mon Sep 17 00:00:00 2001 From: Robert Scott Date: Sun, 6 Apr 2025 20:52:21 +0100 Subject: [PATCH] libgcrypt: disable strictflexarrays3 hardening flag --- pkgs/by-name/li/libgcrypt/package.nix | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/li/libgcrypt/package.nix b/pkgs/by-name/li/libgcrypt/package.nix index 4ac7d48213e2..040fba50592b 100644 --- a/pkgs/by-name/li/libgcrypt/package.nix +++ b/pkgs/by-name/li/libgcrypt/package.nix @@ -32,10 +32,16 @@ stdenv.mkDerivation rec { "out" ]; - # The CPU Jitter random number generator must not be compiled with - # optimizations and the optimize -O0 pragma only works for gcc. - # The build enables -O2 by default for everything else. - hardeningDisable = lib.optional stdenv.cc.isClang "fortify"; + hardeningDisable = + [ + "strictflexarrays3" + ] + ++ lib.optionals stdenv.cc.isClang [ + # The CPU Jitter random number generator must not be compiled with + # optimizations and the optimize -O0 pragma only works for gcc. + # The build enables -O2 by default for everything else. + "fortify" + ]; depsBuildBuild = [ buildPackages.stdenv.cc ];