Skip to content

hardening: Enable i386 FORTIFY_SOURCE on Clang 16+

Kees Cook linux-hardening linux-security-module lkml llvm 2 versions – In review

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v2 Latest2 patches 4 repliesIn review
  2. v11 patch 5 repliesApplied

Patches in v2 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2x86/build: Remove -ffreestanding on i386 with GCCarch/x86/Makefile+2 -03 replies
2/2hardening: Enable i386 FORTIFY_SOURCE on Clang 16+arch/x86/Makefile security/Kconfig.hardening+2 -21 reply

Reviews trailers per patch

All 2 patches have a Reviewed-by or Acked-by.

PatchIngo MolnarNathan Chancellor
1/2A-b R-b
2/2R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v2 thread

Cover letter [PATCH v2 0/2] hardening: Enable i386 FORTIFY_SOURCE on Clang 16+

Hi,

This drops -ffreestanding for i386 unconditionally for GCC, and on Clang version 16 and later. FORTIFY_SOURCE depends on the libcall optimizations made without -ffreestanding on Clang. On GCC, there is no expected differences. With that done, it's possible to gain Clang FORTIFY_SOURCE coverage on i386 again, though only for Clang 16+.

-Kees

v1: https://lore.kernel.org/lkml/[email protected]/
v2: drop -ffreestanding (Nathan)

Kees Cook (2):
x86/build: Remove -ffreestanding on i386 with GCC
hardening: Enable i386 FORTIFY_SOURCE on Clang 16+

 arch/x86/Makefile          | 2 ++
 security/Kconfig.hardening | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
Signature · 1 line
2.34.1

Read the cover letter in its thread