From 9a6d05b756b54bc129f44df93d6e7e851d36749a Mon Sep 17 00:00:00 2001 From: Chris Kay Date: Tue, 30 Jul 2019 17:01:13 +0100 Subject: [PATCH] bs: Add justification of compiler warning flags This commit adds a basic security justification to the Makefile rules, explaining the reasons for increasing the compiler warnings used. Change-Id: Id867f90fc88014a1801ca341e6d1c0c75faa0f35 Signed-off-by: Chris Kay --- tools/build_system/rules.mk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tools/build_system/rules.mk b/tools/build_system/rules.mk index f919ce6b7..d07020dbb 100644 --- a/tools/build_system/rules.mk +++ b/tools/build_system/rules.mk @@ -81,6 +81,10 @@ endif # Warning flags # +# The following flags are enforced to minimise unwitting uses of undefined +# behaviour in the code base, which can open security holes. Each flag applies a +# set of warnings, and any warnings that do occur are upgraded to errors to +# prevent the firmware from building. CFLAGS_GCC += -Werror CFLAGS_GCC += -Wall CFLAGS_GCC += -Wextra -- GitLab