changeset 1505:55120acb9994

Add Spectre v2 mitigations for GCC (#54)
author Loganaden Velvindron <logan@hackers.mu>
date Fri, 16 Feb 2018 19:35:32 +0400
parents bd0bc6b5a87c
children 47f36d8565cf
files configure.ac
diffstat 1 files changed, 5 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/configure.ac	Fri Feb 16 23:33:46 2018 +0800
+++ b/configure.ac	Fri Feb 16 19:35:32 2018 +0400
@@ -110,6 +110,11 @@
 	    )
 	# FORTIFY_SOURCE
 	DB_TRYADDCFLAGS([-D_FORTIFY_SOURCE=2])
+
+	# Spectre v2 mitigations
+	DB_TRYADDCFLAGS([-mfunction-return=thunk])
+	DB_TRYADDCFLAGS([-mindirect-branch=thunk])
+
 fi
 
 # large file support is useful for scp