Mercurial > dropbear

diff configure.ac @ 1505:55120acb9994

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Add Spectre v2 mitigations for GCC (#54)
author Loganaden Velvindron <logan@hackers.mu>
date Fri, 16 Feb 2018 19:35:32 +0400
parents 9b87cbe931e3
children 5916af64acd4 93a3726a36d6
line wrap: on
line diff
--- a/configure.ac	Fri Feb 16 23:33:46 2018 +0800
+++ b/configure.ac	Fri Feb 16 19:35:32 2018 +0400
@@ -110,6 +110,11 @@
 	    )
 	# FORTIFY_SOURCE
 	DB_TRYADDCFLAGS([-D_FORTIFY_SOURCE=2])
+
+	# Spectre v2 mitigations
+	DB_TRYADDCFLAGS([-mfunction-return=thunk])
+	DB_TRYADDCFLAGS([-mindirect-branch=thunk])
+
 fi
 
 # large file support is useful for scp