aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJani Välimaa <wally@mageia.org>2024-02-23 20:07:04 +0200
committerJani Välimaa <wally@mageia.org>2024-02-23 20:07:04 +0200
commitf5e09c2bd429e4b9081037e23db2535c484da5ae (patch)
tree562ba14c098cfa00b25cb6d8266420bb64e70dd5
parent17c74d69f35a2feba8f3543d70f24ccc03c0e708 (diff)
downloadrpm-setup-f5e09c2bd429e4b9081037e23db2535c484da5ae.tar
rpm-setup-f5e09c2bd429e4b9081037e23db2535c484da5ae.tar.gz
rpm-setup-f5e09c2bd429e4b9081037e23db2535c484da5ae.tar.bz2
rpm-setup-f5e09c2bd429e4b9081037e23db2535c484da5ae.tar.xz
rpm-setup-f5e09c2bd429e4b9081037e23db2535c484da5ae.zip
rpmrc: remove -fcf-protection=full from i586 default flags (needs i686 or newer)
According to gcc manual [1] fcf-protection relies on Intel Control-flow Enforcement Technology (CET) which works for i686 processor or newer. [1] https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html#index-fcf-protection
-rw-r--r--NEWS2
-rw-r--r--rpmrc.in2
2 files changed, 3 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 8f95704..9106611 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,5 @@
+- rpmrc: remove -fcf-protection=full from i586 default flags (needs i686 and newer)
+
Version 2.74 - 23 February 2024, by Jani Välimaa
- rpmeval: fix build with gcc13
- rpmrc: add -fstack-clash-protection to default flags for all supported arches
diff --git a/rpmrc.in b/rpmrc.in
index 787f6c7..f2a39f8 100644
--- a/rpmrc.in
+++ b/rpmrc.in
@@ -6,7 +6,7 @@
optflags: i386 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i386 -fasynchronous-unwind-tables -fstack-clash-protection
optflags: i486 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i486 -fasynchronous-unwind-tables -fstack-clash-protection
-optflags: i586 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i586 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection=full
+optflags: i586 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i586 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection
optflags: i686 %{__common_cflags_with_ssp} -fomit-frame-pointer -march=i686 -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection=full
optflags: athlon %{__common_cflags_with_ssp} -fomit-frame-pointer -march=athlon -fasynchronous-unwind-tables -fstack-clash-protection
optflags: x86_64 %{__common_cflags_with_ssp} -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection=full