From 6043274d96191f50c13454d6e807b1e897729055 Mon Sep 17 00:00:00 2001
From: Daniel Pouzzner <douzzer@wolfssl.com>
Date: Tue, 22 Jul 2025 16:45:06 -0500
Subject: [PATCH] linuxkm/Kbuild: revert change to base PIE_FLAGS -- we need
 -fno-stack-protector to avoid compiler-generated references to
 __stack_chk_fail.

---
 linuxkm/Kbuild | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/linuxkm/Kbuild b/linuxkm/Kbuild
index 931335162..5e15ce1d4 100644
--- a/linuxkm/Kbuild
+++ b/linuxkm/Kbuild
@@ -101,7 +101,9 @@ $(obj)/wolfcrypt/test/test.o: ccflags-y += -DNO_MAIN_DRIVER -DWOLFSSL_NO_OPTIONS
 $(obj)/wolfcrypt/src/aes.o: ccflags-y = $(WOLFSSL_CFLAGS) $(WOLFSSL_CFLAGS_YES_VECTOR_INSNS)
 
 ifeq "$(ENABLED_LINUXKM_PIE)" "yes"
-    PIE_FLAGS := -fPIE -fno-toplevel-reorder
+    # note, we need -fno-stack-protector to avoid references to
+    # "__stack_chk_fail" from the wolfCrypt container.
+    PIE_FLAGS := -fPIE -fno-stack-protector -fno-toplevel-reorder
     PIE_SUPPORT_FLAGS := -DUSE_WOLFSSL_LINUXKM_PIE_REDIRECT_TABLE
     ifeq "$(KERNEL_ARCH_X86)" "yes"
         PIE_FLAGS += -mcmodel=small