Compiler security flags while compiling postgres - Mailing list pgsql-novice

Hello,

I wanted to get the perspective of the community on the need to compile with security flags that protect against buffer overflow. It does not appear that the installer for Windows was compiled with these options and I was wondering why.

I am thinking of a compiler flag like /GS (which is now enabled by default in the Microsoft compiler) https://msdn.microsoft.com/en-us/library/8dbf701c.aspx

The postgres binaries are getting flagged in security scans as not being compiled with the recommended secure compiler flags and I am wondering if we need to go through the trouble of recompiling postgres just to add the security related compiler flags.