summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRepository mirror & CI <repomirrorci@gentoo.org>2023-10-21 17:02:31 +0000
committerRepository mirror & CI <repomirrorci@gentoo.org>2023-10-21 17:02:31 +0000
commit9679a8b860813663ca281d7de613a79ed990c840 (patch)
tree4060b09a3f6596ef0dd6f5ded91ad02cafeddd22
parent2023-10-21 16:46:57 UTC (diff)
parentflag-o-matic.eclass: allow hardened compare/control flow flags (diff)
downloadgentoo-9679a8b860813663ca281d7de613a79ed990c840.tar.gz
gentoo-9679a8b860813663ca281d7de613a79ed990c840.tar.bz2
gentoo-9679a8b860813663ca281d7de613a79ed990c840.zip
Merge updates from master
-rw-r--r--eclass/flag-o-matic.eclass4
1 files changed, 4 insertions, 0 deletions
diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass
index c0b042d5348d..0c56ac5b6bf4 100644
--- a/eclass/flag-o-matic.eclass
+++ b/eclass/flag-o-matic.eclass
@@ -56,6 +56,10 @@ _setup-allowed-flags() {
'-fcf-protection=*'
-fbounds-check -fbounds-checking
-fno-PIE -fno-pie -nopie -no-pie
+ -fharden-compares -fharden-conditional-branches
+ -fharden-control-flow-redundancy -fhardcfr-skip-leaf
+ -fhardcfr-check-exceptions -fhardcfr-check-returning-calls
+ '-fhardcfr-check-noreturn-calls=*'
# Spectre mitigations, bug #646076
'-mindirect-branch=*'
-mindirect-branch-register