mirrors/flatcar-scripts
1
0
Fork 0
mirror of https://github.com/flatcar/scripts.git synced 2025-09-24 15:11:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

eclass/flag-o-matic: Sync with Gentoo

Browse Source 
It's from Gentoo commit b81724af911b1c7f0473cd850ab29c74733c5f30.
This commit is contained in:
Flatcar Buildbot 2023-10-23 07:12:34 +00:00 committed by Krzesimir Nowak
parent 7171f70585
commit e9c3a35574
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
sdk_container/src/third_party/portage-stable/eclass/flag-o-matic.eclass vendored
View File

@ -47,7 +47,7 @@ setup-allowed-flags() {
# Note: shell globs and character lists are allowed
_setup-allowed-flags() {
ALLOWED_FLAGS=(
-pipe -O '-O[123szg]' '-mcpu=*' '-march=*' '-mtune=*'
-pipe -O '-O[123szg]' '-mcpu=*' '-march=*' '-mtune=*' '-mfpmath=*'
-flto '-flto=*' -fno-lto
# Hardening flags
@ -56,11 +56,16 @@ _setup-allowed-flags() {
'-fcf-protection=*'
-fbounds-check -fbounds-checking
-fno-PIE -fno-pie -nopie -no-pie
-fharden-compares -fharden-conditional-branches
-fharden-control-flow-redundancy -fhardcfr-skip-leaf
-fhardcfr-check-exceptions -fhardcfr-check-returning-calls
'-fhardcfr-check-noreturn-calls=*'
# Spectre mitigations, bug #646076
'-mindirect-branch=*'
-mindirect-branch-register
'-mfunction-return=*'
-mretpoline
'-mharden-sls=*'
'-mbranch-protection=*'
# Misc
@ -133,6 +138,8 @@ _setup-allowed-flags() {
# Allow explicit stack realignment to run non-conformant
# binaries: bug #677852
-mstackrealign
'-mpreferred-stack-boundary=*'
'-mincoming-stack-boundary=*'
)
ALLOWED_FLAGS+=(
# Clang-only