]> code.ossystems Code Review - openembedded-core.git/commit
gcc: enable branch protection by standard
authorRoss Burton <ross@burtonini.com>
Thu, 20 May 2021 17:15:11 +0000 (18:15 +0100)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 8 Jun 2021 11:12:41 +0000 (12:12 +0100)
commit84e6064cde02b463066d7b63fcf8baf392491327
treed6a436a6aef4fd3bf272aacac180ad9fc610223d
parent0478d9b04d6a6d10e439116b23b641a1e2553e26
gcc: enable branch protection by standard

Pass --enable-standard-branch-protection.  This is an aarch64-specific
option (currently) which does nothing on other targets.  On aarch64 this
generates code uses BTI/PAC instructions to mitigate Return Orientated
Programming attacks.  This approach is backwards compatible and the code
size/performance impact is typically negliable.

More details can be found at
https://events.static.linuxfound.org/sites/events/files/slides/slides_23.pdf

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/gcc/gcc-configure-common.inc