enable Windows NX / ALSR / stack protector

I will update my toolchain and try --high-entropy-va and
stack-protector-strong later. We will probably need to ship libssp-0.dll
as well. Thanks to jsg for hints.

1 files changed, 5 insertions, 1 deletions

diff --git a/dist-win.sh b/dist-win.sh
index fa5bdce..a3f008a 100755
--- a/dist-win.sh
+++ b/dist-win.sh
@@ -24,7 +24,11 @@ export PATH=/cygdrive/c/Program\ Files\ \(x86\)/Microsoft\ Visual\ Studio\ 12.0/
 VERSION=`cat VERSION`
 DIST=libressl-$VERSION-$ARCH
 
-CC=$HOST-gcc ./configure --prefix=/ --host=$HOST --enable-libtls
+CC=$HOST-gcc \
+CFLAGS="-Wl,--nxcompat -fstack-protector" \
+LDFLAGS="-lssp -Wl,--dynamicbase,--export-all-symbols" \
+./configure --prefix=/ --host=$HOST --enable-libtls
+
 make clean
 make -j 4 install DESTDIR=`pwd`/tmp