make stack protector work with gcc configured for non-tls canary