Align flags with make

This pulls a number of cflag changes from make since our last sync.

Change-Id: I8c77fc215ed7677b8ac15a6d39143b519068dd55

cc/arm64_device.go

@@ -25,7 +25,7 @@ var (
 		"-fno-exceptions", // from build/core/combo/select.mk
 		"-Wno-multichar",  // from build/core/combo/select.mk
 		"-fno-strict-aliasing",
-		"-fstack-protector",
+		"-fstack-protector-strong",
 		"-ffunction-sections",
 		"-fdata-sections",
 		"-funwind-tables",
@@ -61,6 +61,8 @@ var (
 		"-Wl,-maarch64linux",
 		"-Wl,--hash-style=gnu",
 		"-Wl,--fix-cortex-a53-843419",
+		"-fuse-ld=gold",
+		"-Wl,--icf=safe",
 		"-Wl,--no-undefined-version",
 
 		// Disable transitive dependency library symbol resolving.

cc/arm_device.go

@@ -33,7 +33,7 @@ var (
 		"-ffunction-sections",
 		"-fdata-sections",
 		"-funwind-tables",
-		"-fstack-protector",
+		"-fstack-protector-strong",
 		"-Wa,--noexecstack",
 		"-Werror=format-security",
 		"-D_FORTIFY_SOURCE=2",

cc/clang.go

@@ -41,7 +41,6 @@ var clangUnknownCflags = sorted([]string{
 
 	// arm + arm64
 	"-fno-align-jumps",
-	"-Wa,--noexecstack",
 
 	// arm
 	"-mthumb-interwork",

cc/mips64_device.go

@@ -34,6 +34,7 @@ var (
 		"-ffunction-sections",
 		"-fdata-sections",
 		"-funwind-tables",
+		"-fstack-protector-strong",
 		"-Wa,--noexecstack",
 		"-Werror=format-security",
 		"-D_FORTIFY_SOURCE=2",

cc/mips_device.go

@@ -34,6 +34,7 @@ var (
 		"-ffunction-sections",
 		"-fdata-sections",
 		"-funwind-tables",
+		"-fstack-protector-strong",
 		"-Wa,--noexecstack",
 		"-Werror=format-security",
 		"-D_FORTIFY_SOURCE=2",

cc/x86_64_device.go

@@ -36,7 +36,7 @@ var (
 		"-fstrict-aliasing",
 		"-funswitch-loops",
 		"-funwind-tables",
-		"-fstack-protector",
+		"-fstack-protector-strong",
 		"-no-canonical-prefixes",
 		"-fno-canonical-system-headers",
 

cc/x86_darwin_host.go

@@ -65,6 +65,7 @@ var (
 
 	darwinClangCflags = append([]string{
 		"-integrated-as",
+		"-fstack-protector-strong",
 	}, clangFilterUnknownCflags(darwinCflags)...)
 
 	darwinClangLdflags = clangFilterUnknownCflags(darwinLdflags)

cc/x86_device.go

@@ -36,7 +36,7 @@ var (
 		"-fstrict-aliasing",
 		"-funswitch-loops",
 		"-funwind-tables",
-		"-fstack-protector",
+		"-fstack-protector-strong",
 		"-no-canonical-prefixes",
 		"-fno-canonical-system-headers",
 

cc/x86_linux_host.go

@@ -69,6 +69,7 @@ var (
 	linuxClangCflags = append([]string{
 		"--gcc-toolchain=${linuxGccRoot}",
 		"--sysroot=${linuxGccRoot}/sysroot",
+		"-fstack-protector-strong",
 	}, clangFilterUnknownCflags(linuxCflags)...)
 
 	linuxClangLdflags = append([]string{