From b21ea7ef97b105c0a31ec59e669c7d198f96930a Mon Sep 17 00:00:00 2001
From: chenmingkai <chenmingkai1@huawei.com>
Date: Mon, 18 Mar 2024 20:33:20 +0800
Subject: [PATCH] [Sec] Add safe compilation options [bugfix] fix wrong
 environment configuration

---
 cmake/config.cmake | 2 +-
 setup.py           | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/cmake/config.cmake b/cmake/config.cmake
index ef0e1cc0..2105c2cc 100644
--- a/cmake/config.cmake
+++ b/cmake/config.cmake
@@ -8,7 +8,7 @@ if(NOT DEFINED vendor_name)
 endif()
 # read ASCEND_HOME_PATH from environment variable, change ASCEND_CANN_PACKAGE_PATH to ASCEND_HOME_PATH
 if (DEFINED ENV{ASCEND_AICPU_PATH})
-  set(ASCEND_CANN_PACKAGE_PATH $ENV{ASCEND_HOME_PATH})
+  set(ASCEND_CANN_PACKAGE_PATH $ENV{ASCEND_AICPU_PATH})
 endif()
 if(NOT DEFINED ASCEND_CANN_PACKAGE_PATH)
   set(ASCEND_CANN_PACKAGE_PATH
diff --git a/setup.py b/setup.py
index 585b7cee..5a1b35d6 100644
--- a/setup.py
+++ b/setup.py
@@ -27,6 +27,13 @@ ext1 = extension.NpuExtension(
         '-D__FILENAME__="$$(notdir $$(abspath $$<))"',
         "-fprofile-arcs",
         "-ftest-coverage",
+        "-fPIC",
+        "-fstack-protector-all",
+    ],
+    extra_link_args=[
+        "-Wl,-z,relro",
+        "-Wl,-z,now",
+        "-s"
     ],
     libraries=["gcov"],
 )
-- 
Gitee