mirror of
https://github.com/clearml/dropbear
synced 2025-02-12 07:25:30 +00:00
Add Spectre v2 mitigations for GCC (#54)
This commit is contained in:
parent
3a923b72a4
commit
017e2f07a7
@ -110,6 +110,11 @@ if test "$hardenbuild" -eq 1; then
|
|||||||
)
|
)
|
||||||
# FORTIFY_SOURCE
|
# FORTIFY_SOURCE
|
||||||
DB_TRYADDCFLAGS([-D_FORTIFY_SOURCE=2])
|
DB_TRYADDCFLAGS([-D_FORTIFY_SOURCE=2])
|
||||||
|
|
||||||
|
# Spectre v2 mitigations
|
||||||
|
DB_TRYADDCFLAGS([-mfunction-return=thunk])
|
||||||
|
DB_TRYADDCFLAGS([-mindirect-branch=thunk])
|
||||||
|
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# large file support is useful for scp
|
# large file support is useful for scp
|
||||||
|
Loading…
Reference in New Issue
Block a user