[Pidgin] #15290: Compile everything with secure flags

[Pidgin]

#15290: Compile everything with secure flags
-------------------------------------+--------------------------------------
 Reporter:  DrWhax                   |        Owner:  datallah       
     Type:  defect                   |       Status:  new            
Milestone:                           |    Component:  winpidgin (gtk)
  Version:  2.10.6                   |   Resolution:                 
 Keywords:  security aslr dep build  |  
-------------------------------------+--------------------------------------
Changes (by datallah):

  * owner:  rekkanoryo => datallah
  * component:  unclassified => winpidgin (gtk)


Comment:

 Do those flags actually work for pidgin-otr?

 I needed to use the following so that the flags actually were passed to
 the linker to get it to work in Pidgin:
 {{{
 LD_HARDENING_OPTIONS ?= -Wl,--dynamicbase -Wl,--nxcompat
 }}
 There were no compiler errors, ASLR just wasn't enabled for the process
 when it was launched.

 Also, it seems like -fPIE and -pie don't make sense on windows since stuff
 is relocatable anyway - the compiler prints out a message to that effect
 if you use -fPIE.

 I've got Pidgin building with various options enabled and it seems to work
 ok (patch attached).  I haven't yet figured the right way to ship the ssp
 dll, I manually copied it from the the gcc bin directory to test this out;
 once that's resolved and this gets a bit more testing, I can commit it.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/15290#comment:4>
Pidgin <http://pidgin.im>
Pidgin