[PATCH] D59780: Support Intel Control-flow Enforcement Technology

Fangrui Song via Phabricator via llvm-commits llvm-commits at lists.llvm.org
Tue Mar 26 03:20:24 PDT 2019


MaskRay added a comment.

So on the compiler driver side, `-fcf-protection` is the single option end users are concerned. I believe this option hasn't been assigned linker option semantics in either GCC or clang. If assigning it the linker option semantics is favorable, we should make it compatible in GCC/clang and ideally use the same options in lld/ld.bfd/gold.

It seems `-fcf-protection` as the only compiler driver option is not sufficient, as both `--{auto,force}-cet` have reasonable use cases. We may need another compiler driver option to express both intents. Given the removal of `-mibt` (D46881 <https://reviews.llvm.org/D46881> on clang side), I wish the repurpose of `-z ibt` `-z ibtplt` `-z shstk` in ld.bfd is doable if needed.


Repository:
  rG LLVM Github Monorepo

CHANGES SINCE LAST ACTION
  https://reviews.llvm.org/D59780/new/

https://reviews.llvm.org/D59780





More information about the llvm-commits mailing list