0001-build-build-the-sandbox-with-PIE.patch

From 555d59bbe4ac7f21249ce878411a9fdea25d1ea0 Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Thu, 29 Jan 2015 10:39:51 +0100
Subject: [PATCH] build: build the sandbox with PIE

(Position Independent Executable.)
This patch originally from openSUSE, chromium-sandbox-pie.patch.
---
 sandbox/linux/BUILD.gn | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/sandbox/linux/BUILD.gn b/sandbox/linux/BUILD.gn
index 9d4726f89e4b..519fdece3c5f 100644
--- a/sandbox/linux/BUILD.gn
+++ b/sandbox/linux/BUILD.gn
@@ -310,12 +310,13 @@ if (is_linux) {
 
     cflags = [
       # For ULLONG_MAX
-      "-std=gnu99",
+      "-std=gnu99", "-fPIE",
 
       # These files have a suspicious comparison.
       # TODO fix this and re-enable this warning.
       "-Wno-sign-compare",
     ]
+    ldflags = [ "-pie" ]
 
     import("//build/config/compiler/compiler.gni")
     import("//build/config/sanitizers/sanitizers.gni")
-- 
2.14.3