Changeset View
Changeset View
Standalone View
Standalone View
sys/conf/kern.mk
Show First 20 Lines • Show All 207 Lines • ▼ Show 20 Lines | |||||
# use of signed integer wraparound mechanics so we need the compiler | # use of signed integer wraparound mechanics so we need the compiler | ||||
# to treat it as a wraparound and not take shortcuts. | # to treat it as a wraparound and not take shortcuts. | ||||
# | # | ||||
CFLAGS+= -fwrapv | CFLAGS+= -fwrapv | ||||
# | # | ||||
# GCC SSP support | # GCC SSP support | ||||
# | # | ||||
.if ${MK_SSP} != "no" && \ | .if ${MK_SSP} != "no" | ||||
${MACHINE_CPUARCH} != "arm" && ${MACHINE_CPUARCH} != "mips" | |||||
CFLAGS+= -fstack-protector | CFLAGS+= -fstack-protector | ||||
.endif | .endif | ||||
# | # | ||||
# Retpoline speculative execution vulnerability mitigation (CVE-2017-5715) | # Retpoline speculative execution vulnerability mitigation (CVE-2017-5715) | ||||
# | # | ||||
.if defined(COMPILER_FEATURES) && ${COMPILER_FEATURES:Mretpoline} != "" && \ | .if defined(COMPILER_FEATURES) && ${COMPILER_FEATURES:Mretpoline} != "" && \ | ||||
${MK_KERNEL_RETPOLINE} != "no" | ${MK_KERNEL_RETPOLINE} != "no" | ||||
▲ Show 20 Lines • Show All 98 Lines • Show Last 20 Lines |