diff options
author | Sam James <sam@gentoo.org> | 2023-05-07 16:31:34 +0100 |
---|---|---|
committer | Sam James <sam@gentoo.org> | 2023-05-07 16:59:19 +0100 |
commit | ff83b5e28ffaf5cb62afed4888968a11f277e49f (patch) | |
tree | 2010cbae61a9b937c01fcb7dc6466380ced84c2b /eclass/flag-o-matic.eclass | |
parent | flag-o-matic.eclass: add -O3 to ALLOWED_FLAGS (strip-flags whitelist) (diff) | |
download | gentoo-ff83b5e28ffaf5cb62afed4888968a11f277e49f.tar.gz gentoo-ff83b5e28ffaf5cb62afed4888968a11f277e49f.tar.bz2 gentoo-ff83b5e28ffaf5cb62afed4888968a11f277e49f.zip |
flag-o-matic.eclass: drop -fstack-check from ALLOWED_FLAGS (strip-flags whitelist)
-fstack-check is _not_ a safe flag:
* https://developers.redhat.com/blog/2017/09/25/stack-clash-mitigation-gcc-background
* https://developers.redhat.com/blog/2019/04/30/stack-clash-mitigation-in-gcc-why-fstack-check-is-not-the-answer
Nobody is really interested in maintaining this functionality upstream in GCC
anymore for this reason, it's not IIRC supported in Clang, and we're not testing
it either.
Please use the far superior -fstack-clash-protection instead.
Signed-off-by: Sam James <sam@gentoo.org>
Diffstat (limited to 'eclass/flag-o-matic.eclass')
-rw-r--r-- | eclass/flag-o-matic.eclass | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass index 3dd39c54a531..be169f934c02 100644 --- a/eclass/flag-o-matic.eclass +++ b/eclass/flag-o-matic.eclass @@ -51,7 +51,6 @@ _setup-allowed-flags() { # Hardening flags '-fstack-protector*' - '-fstack-check*' -fno-stack-check -fstack-clash-protection '-fcf-protection=*' -fbounds-check -fbounds-checking |