From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Tremer To: development@lists.ipfire.org Subject: [PATCH 56/62] make.sh: Add -fcf-protection for x86_64/i586 Date: Sun, 16 Aug 2020 10:29:47 +0000 Message-ID: <20200816102953.3881-56-michael.tremer@ipfire.org> In-Reply-To: <20200816102953.3881-1-michael.tremer@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3462075883018859134==" List-Id: --===============3462075883018859134== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Instrument binaries to guard against ROP/JOP attacks. This flag in only available on x86_64 and i586. Signed-off-by: Michael Tremer --- make.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/make.sh b/make.sh index fae75fdc9..99ac1bc85 100755 --- a/make.sh +++ b/make.sh @@ -146,14 +146,14 @@ configure_build() { BUILDTARGET=3D"${build_arch}-unknown-linux-gnu" CROSSTARGET=3D"${build_arch}-cross-linux-gnu" BUILD_PLATFORM=3D"x86" - CFLAGS_ARCH=3D"-m64 -mtune=3Dgeneric -fstack-clash-protection" + CFLAGS_ARCH=3D"-m64 -mtune=3Dgeneric -fstack-clash-protection -fcf-protec= tion" ;; =20 i586) BUILDTARGET=3D"${build_arch}-pc-linux-gnu" CROSSTARGET=3D"${build_arch}-cross-linux-gnu" BUILD_PLATFORM=3D"x86" - CFLAGS_ARCH=3D"-march=3Di586 -mtune=3Dgeneric -fomit-frame-pointer" + CFLAGS_ARCH=3D"-march=3Di586 -mtune=3Dgeneric -fomit-frame-pointer -fcf-p= rotection" ;; =20 aarch64) --=20 2.20.1 --===============3462075883018859134==--