summary refs log tree commit diff
path: root/pkgs/build-support/bintools-wrapper
diff options
context:
space:
mode:
Diffstat (limited to 'pkgs/build-support/bintools-wrapper')
-rw-r--r--pkgs/build-support/bintools-wrapper/add-hardening.sh5
1 files changed, 3 insertions, 2 deletions
diff --git a/pkgs/build-support/bintools-wrapper/add-hardening.sh b/pkgs/build-support/bintools-wrapper/add-hardening.sh
index 19321fcb18b..2ed36df3e1d 100644
--- a/pkgs/build-support/bintools-wrapper/add-hardening.sh
+++ b/pkgs/build-support/bintools-wrapper/add-hardening.sh
@@ -6,7 +6,7 @@ declare -A hardeningEnableMap=()
 # array expansion also prevents undefined variables from causing trouble with
 # `set -u`.
 for flag in ${NIX_@infixSalt@_HARDENING_ENABLE-}; do
-  hardeningEnableMap[$flag]=1
+  hardeningEnableMap["$flag"]=1
 done
 
 # Remove unsupported flags.
@@ -15,9 +15,10 @@ for flag in @hardening_unsupported_flags@; do
 done
 
 if (( "${NIX_DEBUG:-0}" >= 1 )); then
-  # Determine which flags were effectively disabled so we can report below.
   declare -a allHardeningFlags=(pie relro bindnow)
   declare -A hardeningDisableMap=()
+
+  # Determine which flags were effectively disabled so we can report below.
   for flag in "${allHardeningFlags[@]}"; do
     if [[ -z "${hardeningEnableMap[$flag]-}" ]]; then
       hardeningDisableMap[$flag]=1