diff options
| author | fanquake <fanquake@gmail.com> | 2024-03-26 13:41:41 +0000 |
|---|---|---|
| committer | fanquake <fanquake@gmail.com> | 2024-03-26 13:45:33 +0000 |
| commit | d04324a7056a735c1127ba8ccdc720a16e7281a3 (patch) | |
| tree | 91bf124e9001c73fb96437dd2d56da01de4ad4a7 /contrib/devtools/bitcoin-tidy/CMakeLists.txt | |
| parent | 19b968f743ca666032371ab2424feaffd0c6043e (diff) | |
| parent | 7850c5fe20a034438e00f6c12ce51efc6af3a1aa (diff) | |
Merge bitcoin/bitcoin#29695: guix: build GCC with --enable-standard-branch-protection
7850c5fe20a034438e00f6c12ce51efc6af3a1aa guix: build GCC with --enable-standard-branch-protection (fanquake)
Pull request description:
This is one change extracted from #24123 (which now produces fully BTI & PAC enabled bins), which will mean that everything in depends, for Guix builds, is compiled using `-mbranch-protection=standard`.
Turning this on by default, is similar to what we already do with `--enable-default-ssp`, `--enable-default-pie` etc.
See: https://gcc.gnu.org/install/specific.html#aarch64-x-x
> To enable Branch Target Identification Mechanism and Return Address Signing by default at configure time use the `--enable-standard-branch-protection` option.
> This is equivalent to having `-mbranch-protection=standard` during compilation. This can be explicitly disabled during compilation by passing the `-mbranch-protection=none` option which turns off all types of branch protections.
ACKs for top commit:
TheCharlatan:
ACK 7850c5fe20a034438e00f6c12ce51efc6af3a1aa
Tree-SHA512: 18f898da27021bab502e708ea5fa9b325352f8f6e23d9488a2a0feda87e0af2ac0e4f87b3af9ad6a9a37bbfc99ab0285de4f0bdc174dcd38163d92c122e958e2
Diffstat (limited to 'contrib/devtools/bitcoin-tidy/CMakeLists.txt')
0 files changed, 0 insertions, 0 deletions