Don't update hermetic toolchain

armallen · armallen · commit 193c28200ce3 · 2025-09-10T18:19:31.000+02:00
diff --git a/cc/toolchains/llvm/cc_toolchain_config.bzl b/cc/toolchains/llvm/cc_toolchain_config.bzl
@@ -44,6 +44,7 @@ def cc_toolchain_config(
         "--target=" + target_system_name,
         # Security
         "-U_FORTIFY_SOURCE",  # https://github.com/google/sanitizers/issues/247
+        "-fstack-protector",
         "-fno-omit-frame-pointer",
         # Math
         # This controls whether the compiler allows contracting floating point operations.
diff --git a/cc/toolchains/llvm20/cc_toolchain_config.bzl b/cc/toolchains/llvm20/cc_toolchain_config.bzl
@@ -44,6 +44,7 @@ def cc_toolchain_config(
         "--target=" + target_system_name,
         # Security
         "-U_FORTIFY_SOURCE",  # https://github.com/google/sanitizers/issues/247
+        "-fstack-protector",
         "-fno-omit-frame-pointer",
         # Math
         # This controls whether the compiler allows contracting floating point operations.
