From 256cbd88c53d15884f3519ce75890c7bd1626cb2 Mon Sep 17 00:00:00 2001
From: nsfisis <nsfisis@gmail.com>
Date: Wed, 3 Sep 2025 20:32:23 +0900
Subject: build: disable hardening of Nix GCC

---
 Makefile  | 2 ++
 flake.nix | 7 +++++++
 2 files changed, 9 insertions(+)

diff --git a/Makefile b/Makefile
index 3e3a420..773f3d7 100644
--- a/Makefile
+++ b/Makefile
@@ -24,9 +24,11 @@ all: $(BUILD_DIR) $(BUILD_ROOT_DIR)/$(TARGET)
 $(BUILD_DIR):
 	@mkdir -p $(BUILD_DIR)
 
+# TODO: provide release build?
 $(BUILD_ROOT_DIR)/$(TARGET): $(OBJECTS)
 	$(CC) -Wall -MMD -g -O0 -o $@ $^
 
+# TODO: provide release build?
 $(BUILD_DIR)/%.o: src/%.c
 	$(CC) -c -Wall -MMD -g -O0 -o $@ $<
 
diff --git a/flake.nix b/flake.nix
index 385fcc1..5952538 100644
--- a/flake.nix
+++ b/flake.nix
@@ -36,6 +36,10 @@
           pname = "ducc";
           version = "0.1.0";
           src = ./.;
+          # Disable some kinds of hardening to disable GCC optimization.
+          # cf. https://nixos.wiki/wiki/C#Hardening_flags
+          # TODO: provide release build?
+          hardeningDisable = [ "fortify" ];
           installPhase = ''
             mkdir -p $out/bin
             cp build/ducc $out/bin
@@ -46,6 +50,9 @@
           packages = [
             pkgs.just
           ];
+          # Disable some kinds of hardening to disable GCC optimization.
+          # cf. https://nixos.wiki/wiki/C#Hardening_flags
+          hardeningDisable = [ "fortify" ];
         };
 
         formatter = treefmt.config.build.wrapper;
-- 
cgit v1.2.3-70-g09d2