gcc: disable code fortification with sanitizers

Related: google/sanitizers#247 (comment)

py/plugins/gcc.py

@@ -193,6 +193,15 @@ def handle_args(self, parser, args, props):
             self.flags.append_flags(['-g', '-fno-omit-frame-pointer',
                                      '-fsanitize-recover=all'])
 
+            # sanitizers are not compatible with FORTIFY_SOURCE
+            # https://github.com/google/sanitizers/issues/247#issuecomment-1283500316
+            #
+            # annobin should always be present in the buildroot since it is
+            # required by redhat-rpm-config
+            self.flags.append_flags(["-Wp,-U_FORTIFY_SOURCE",
+                                     "-fplugin=annobin",
+                                     "-fplugin-arg-annobin-no-active-checks"])
+
             # create directory for sanitizer's results
             def create_cap_dir_hook(results, mock):
                 cmd = f"mkdir -pv '{SANITIZER_CAPTURE_DIR}'"