pegasus/unrealircd
1
0
Fork 0
mirror of https://github.com/unrealircd/unrealircd.git synced 2026-06-12 17:14:46 +02:00
Code Activity

Remove -fzero-call-used-regs=used-gpr again. This is apparently not

Browse Source 
as useful as initially thought. I thought kernel hardening checker
was in favor of it, and they were, but they dropped it in Oct 2023.

(i added it 2-3hrs ago in 0ab1221a38)
This commit is contained in:
Bram Matthys
2026-02-22 19:00:59 +01:00
parent 5cc59192bc
commit dcd8f738fe
2 changed files with 0 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files
configure.ac
-3
View File
@@ -153,9 +153,6 @@ AS_IF([test x"$hardening" != x"no"], [
# Since we have moved from name[1] to name[], setting this should help bounds checking:
check_cc_flag([-fstrict-flex-arrays=3], [HARDEN_CFLAGS="$HARDEN_CFLAGS -fstrict-flex-arrays=3"])
# Clear registers on return (performance penalty, but acceptable, makes ROP harder)
check_cc_flag([-fzero-call-used-regs=used-gpr], [HARDEN_CFLAGS="$HARDEN_CFLAGS -fzero-call-used-regs=used-gpr"])
# This zeroes out variables that COULD be accessed before being set.
# We are generally very careful about this in our code, but 3rd party
# modules are not always so careful. And still useful in case we ourselves