diff --git a/src/Compilation.zig b/src/Compilation.zig
index 2af35b7d660ff1fbb1eb92726c7b2cb5db0345df..6fd1a2f874f2cf4af68a0c47a8908d7bae40a03a 100644
--- a/src/Compilation.zig
+++ b/src/Compilation.zig
@@ -2896,7 +2896,7 @@ pub fn addCCArgs(
                     try argv.append("-D_DEBUG");
                     try argv.append("-Og");
 
-                    if (comp.bin_file.options.link_libc) {
+                    if (comp.bin_file.options.link_libc and target.os.tag != .wasi) {
                         try argv.append("-fstack-protector-strong");
                         try argv.append("--param");
                         try argv.append("ssp-buffer-size=4");
@@ -2908,7 +2908,7 @@ pub fn addCCArgs(
                     // See the comment in the BuildModeFastRelease case for why we pass -O2 rather
                     // than -O3 here.
                     try argv.append("-O2");
-                    if (comp.bin_file.options.link_libc) {
+                    if (comp.bin_file.options.link_libc and target.os.tag != .wasi) {
                         try argv.append("-D_FORTIFY_SOURCE=2");
                         try argv.append("-fstack-protector-strong");
                         try argv.append("--param");
diff --git a/src/wasi_libc.zig b/src/wasi_libc.zig
index 1fba312265c51cd35b29a0e5277b239ceec37eea..0885f4c5be006c5f462bff52bf170d40026e73c6 100644
--- a/src/wasi_libc.zig
+++ b/src/wasi_libc.zig
@@ -234,6 +234,7 @@ fn addCCArgs(
     try args.appendSlice(&[_][]const u8{
         "-std=gnu17",
         "-fno-trapping-math",
+        "-fno-stack-protector",
         "-w", // ignore all warnings
 
         o_arg,