From 7656d22f640101af9ad8de1829e28f7d2b14de56 Mon Sep 17 00:00:00 2001
From: wangrong <wangrong@uniontech.com>
Date: Mon, 24 Nov 2025 13:16:12 +0800
Subject: [PATCH] chore: Update compiler flags for security enhancements

Add "-D_FORTIFY_SOURCE=2"

Log: Update compiler flags for security enhancements
Bug: https://pms.uniontech.com/bug-view-337059.html
---
 .reuse/dep5             | 2 +-
 src/app/app.pro         | 4 ++--
 src/service/service.pro | 4 ++--
 src/tests/tests.pro     | 4 ++--
 4 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/.reuse/dep5 b/.reuse/dep5
index 069ae1fa..d526c6dd 100644
--- a/.reuse/dep5
+++ b/.reuse/dep5
@@ -49,7 +49,7 @@ Copyright: UnionTech Software Technology Co., Ltd.
 License: CC0-1.0
 
 # eliminate files in src/tools
-Files: src/tools/exportPot src/tools/importPo src/tools/importPo.bat
+Files: src/tools/exportPot src/tools/exportPot.bat src/tools/importPo src/tools/importPo.bat
 Copyright: UnionTech Software Technology Co., Ltd.
 License: CC0-1.0
 
diff --git a/src/app/app.pro b/src/app/app.pro
index 58e6af35..cf1c87a8 100644
--- a/src/app/app.pro
+++ b/src/app/app.pro
@@ -5,8 +5,8 @@ TEMPLATE  = app
 TARGET = deepin-boot-maker
 #添加安全编译参数
 QMAKE_LFLAGS += -z noexecstack -pie -z relro -z now
-QMAKE_CFLAGS += -fstack-protector-all -fPIE
-QMAKE_CXXFLAGS += -fstack-protector-all -fPIE
+QMAKE_CFLAGS += -fstack-protector-all -fPIE -D_FORTIFY_SOURCE=2
+QMAKE_CXXFLAGS += -fstack-protector-all -fPIE -D_FORTIFY_SOURCE=2
 
 ## 添加内存泄露检测
 #CONFIG(debug, debug|release) {
diff --git a/src/service/service.pro b/src/service/service.pro
index ed4361be..453658a5 100644
--- a/src/service/service.pro
+++ b/src/service/service.pro
@@ -10,8 +10,8 @@ CONFIG -= app_bundle
 
 #添加安全编译参数
 QMAKE_LFLAGS += -z noexecstack -pie -z relro -z now
-QMAKE_CFLAGS += -fstack-protector-all -fPIE
-QMAKE_CXXFLAGS += -fstack-protector-all -fPIE
+QMAKE_CFLAGS += -fstack-protector-all -fPIE -D_FORTIFY_SOURCE=2
+QMAKE_CXXFLAGS += -fstack-protector-all -fPIE -D_FORTIFY_SOURCE=2
 
 
 TEMPLATE = app
diff --git a/src/tests/tests.pro b/src/tests/tests.pro
index 99599c5c..b9ec7fc2 100644
--- a/src/tests/tests.pro
+++ b/src/tests/tests.pro
@@ -9,8 +9,8 @@ CONFIG(debug, debug|release) {
 
 #添加安全编译参数
 QMAKE_LFLAGS += -z noexecstack -pie -z relro -z now
-QMAKE_CFLAGS += -fstack-protector-all -fPIE
-QMAKE_CXXFLAGS += -fstack-protector-all -fno-access-control -fPIE
+QMAKE_CFLAGS += -fstack-protector-all -fPIE -D_FORTIFY_SOURCE=2
+QMAKE_CXXFLAGS += -fstack-protector-all -fno-access-control -fPIE -D_FORTIFY_SOURCE=2
 
 
 QT += core gui widgets testlib