From 5b4f35741ef91e9b4a33e2bcc60f209927c6cc5d Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Sat, 21 Oct 2023 22:01:02 +0100 Subject: gentoo auto-resync : 21:10:2023 - 22:01:01 --- eclass/Manifest.gz | Bin 39132 -> 39130 bytes eclass/flag-o-matic.eclass | 9 ++++++++- 2 files changed, 8 insertions(+), 1 deletion(-) (limited to 'eclass') diff --git a/eclass/Manifest.gz b/eclass/Manifest.gz index 79ab68dd80a6..bccf3792551c 100644 Binary files a/eclass/Manifest.gz and b/eclass/Manifest.gz differ diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass index c0b042d5348d..382573b80679 100644 --- a/eclass/flag-o-matic.eclass +++ b/eclass/flag-o-matic.eclass @@ -47,7 +47,7 @@ setup-allowed-flags() { # Note: shell globs and character lists are allowed _setup-allowed-flags() { ALLOWED_FLAGS=( - -pipe -O '-O[123szg]' '-mcpu=*' '-march=*' '-mtune=*' + -pipe -O '-O[123szg]' '-mcpu=*' '-march=*' '-mtune=*' '-mfpmath=*' -flto '-flto=*' -fno-lto # Hardening flags @@ -56,11 +56,16 @@ _setup-allowed-flags() { '-fcf-protection=*' -fbounds-check -fbounds-checking -fno-PIE -fno-pie -nopie -no-pie + -fharden-compares -fharden-conditional-branches + -fharden-control-flow-redundancy -fhardcfr-skip-leaf + -fhardcfr-check-exceptions -fhardcfr-check-returning-calls + '-fhardcfr-check-noreturn-calls=*' # Spectre mitigations, bug #646076 '-mindirect-branch=*' -mindirect-branch-register '-mfunction-return=*' -mretpoline + '-mharden-sls=*' '-mbranch-protection=*' # Misc @@ -133,6 +138,8 @@ _setup-allowed-flags() { # Allow explicit stack realignment to run non-conformant # binaries: bug #677852 -mstackrealign + '-mpreferred-stack-boundary=*' + '-mincoming-stack-boundary=*' ) ALLOWED_FLAGS+=( # Clang-only -- cgit v1.2.3