[lld] [AArch64][GCS][LLD] Introduce -zgcs-report-dynamic Command Line Option (PR #127787)
Jack Styles via llvm-commits
llvm-commits at lists.llvm.org
Wed Mar 12 07:19:16 PDT 2025
https://github.com/Stylie777 updated https://github.com/llvm/llvm-project/pull/127787
>From 84b665c78b56e29e871d9fa2a6a53c5255c2e1ca Mon Sep 17 00:00:00 2001
From: Jack Styles <jack.styles at arm.com>
Date: Tue, 18 Feb 2025 15:21:33 +0000
Subject: [PATCH 1/6] [AArch64][GCS] Convert -zgcs-report processing to use an
Enum
To enable easier processing of inheritance for the -zgcs-report-dynamic
option, the -zgcs-report option has been converted to use an Enum value
to define its setting rather than a StringRef value.
This adds the Enum class for defining the three options, None, Warning
and Error, along with the appropirate methods for processing the users
input. To enable the error messages, a new lambda function has been
added. This processes the Enum value and passes the appropriate string
into the `report` lambda function for the error message. Error messages
have been updated where required.
---
lld/ELF/Driver.cpp | 32 ++++++++++++++++++++++++------
lld/test/ELF/aarch64-feature-gcs.s | 5 +++++
2 files changed, 31 insertions(+), 6 deletions(-)
diff --git a/lld/ELF/Driver.cpp b/lld/ELF/Driver.cpp
index 18f9fed0d08e2..35a7f4af9efe4 100644
--- a/lld/ELF/Driver.cpp
+++ b/lld/ELF/Driver.cpp
@@ -574,6 +574,27 @@ static GcsPolicy getZGcs(Ctx &ctx, opt::InputArgList &args) {
return ret;
}
+static ReportPolicy getZGcsReport(Ctx &ctx, opt::InputArgList &args) {
+ ReportPolicy ret = ReportPolicy::None;
+
+ for (auto *arg : args.filtered(OPT_z)) {
+ std::pair<StringRef, StringRef> kv = StringRef(arg->getValue()).split('=');
+ if (kv.first == "gcs-report") {
+ arg->claim();
+ if (kv.second == "none")
+ ret = ReportPolicy::None;
+ else if (kv.second == "warning")
+ ret = ReportPolicy::Warning;
+ else if (kv.second == "error")
+ ret = ReportPolicy::Error;
+ else
+ ErrAlways(ctx) << "unknown -z gcs-report= value: " << kv.second;
+ }
+ }
+
+ return ret;
+}
+
// Report a warning for an unknown -z option.
static void checkZOptions(Ctx &ctx, opt::InputArgList &args) {
// This function is called before getTarget(), when certain options are not
@@ -1548,6 +1569,7 @@ static void readConfigs(Ctx &ctx, opt::InputArgList &args) {
ctx.arg.zForceBti = hasZOption(args, "force-bti");
ctx.arg.zForceIbt = hasZOption(args, "force-ibt");
ctx.arg.zGcs = getZGcs(ctx, args);
+ ctx.arg.zGcsReport = getZGcsReport(ctx, args);
ctx.arg.zGlobal = hasZOption(args, "global");
ctx.arg.zGnustack = getZGnuStack(args);
ctx.arg.zHazardplt = hasZOption(args, "hazardplt");
@@ -1620,12 +1642,10 @@ static void readConfigs(Ctx &ctx, opt::InputArgList &args) {
ErrAlways(ctx) << errPrefix << pat.takeError() << ": " << kv.first;
}
- auto reports = {
- std::make_pair("bti-report", &ctx.arg.zBtiReport),
- std::make_pair("cet-report", &ctx.arg.zCetReport),
- std::make_pair("execute-only-report", &ctx.arg.zExecuteOnlyReport),
- std::make_pair("gcs-report", &ctx.arg.zGcsReport),
- std::make_pair("pauth-report", &ctx.arg.zPauthReport)};
+ auto reports = {std::make_pair("bti-report", &ctx.arg.zBtiReport),
+ std::make_pair("cet-report", &ctx.arg.zCetReport),
+ std::make_pair("execute-only-report", &ctx.arg.zExecuteOnlyReport),
+ std::make_pair("pauth-report", &ctx.arg.zPauthReport)};
for (opt::Arg *arg : args.filtered(OPT_z)) {
std::pair<StringRef, StringRef> option =
StringRef(arg->getValue()).split('=');
diff --git a/lld/test/ELF/aarch64-feature-gcs.s b/lld/test/ELF/aarch64-feature-gcs.s
index b53a653dddaee..42d40f64d8896 100644
--- a/lld/test/ELF/aarch64-feature-gcs.s
+++ b/lld/test/ELF/aarch64-feature-gcs.s
@@ -54,6 +54,11 @@
# INVALID: error: unknown -z gcs= value: nonsense
+## An invalid gcs option should give an error
+# RUN: not ld.lld func1-gcs.o func2-gcs.o func3-gcs.o -z gcs-report=nonsense 2>&1 | FileCheck --check-prefix=INVALID-GCS-REPORT %s
+
+# INVALID-GCS-REPORT: error: unknown -z gcs-report= value: nonsense
+
#--- func1-gcs.s
.section ".note.gnu.property", "a"
.long 4
>From 79fd58df93745c306bb420a897b7ab4172023fe2 Mon Sep 17 00:00:00 2001
From: Jack Styles <jack.styles at arm.com>
Date: Mon, 17 Feb 2025 15:22:49 +0000
Subject: [PATCH 2/6] [AArch64][GCS][LLD] Introduce -z gcs-report-dynamic
option
When GCS was introduced to LLD, the gcs-report option allowed
for a user to gain information relating to if their relocatable objects
supported the feature. For an executable or shared-library to support
GCS, all relocatable objects must declare that they support GCS.
The gcs-report checks were only done on relocatable object files,
however for a program to enable GCS, the executable and all
shared libraries that it loads must enable GCS.
gcs-report-dynamic enables checks to be performed on all shared
objects loaded by LLD, and in cases where GCS is not supported,
a warning or error will be emitted.
It should be noted that only shared files directly passed to LLD
are checked for GCS support. Files that are noted in the `DT_NEEDED`
tags are assumed to have had their GCS support checked when they
were created.
The behaviour of the -zgcs-dynamic-report option matches that of
GNU ld. The behaviour is as follows unless the user explicitly
sets the value:
* -zgcs-report=warning or -zgcs-report=error implies
-zgcs-report-dynamic=warning.
This approach avoids inheriting an error level if the
user wishes to continue building a module without rebuilding all
the shared libraries. The same approach was taken for the GNU ld
linker, so behaviour is identical across the toolchains.
This implementation matches the error message and command
line interface used within the GNU ld Linker. See here:
https://inbox.sourceware.org/binutils/20241206153746.3760179-2-matthieu.longo@arm.com/
To enable the checking of the GNU GCS Attributes when linking together
an application, LLD needs to be able to parse a Shared Files program
headers. This will enable a new option, allowing the user to output
diagnostic information relating to if there are shared files being
used that do not support the GCS extension.
To define if a shared file support GCS, the GNU GCS Attribute will
be stored within the Program Header, so this is parsed and, if
found, the `andFeatures` value updated to reflect the support level.
---
lld/ELF/Config.h | 13 +++
lld/ELF/Driver.cpp | 68 +++++++++++-----
lld/ELF/InputFiles.cpp | 126 ++++++++++++++++++++---------
lld/ELF/InputFiles.h | 3 +
lld/docs/ReleaseNotes.rst | 5 ++
lld/test/ELF/aarch64-feature-gcs.s | 31 +++++--
6 files changed, 186 insertions(+), 60 deletions(-)
diff --git a/lld/ELF/Config.h b/lld/ELF/Config.h
index d14faca31d58f..cfeca8b4eed0a 100644
--- a/lld/ELF/Config.h
+++ b/lld/ELF/Config.h
@@ -232,6 +232,7 @@ struct Config {
ReportPolicy zCetReport = ReportPolicy::None;
ReportPolicy zPauthReport = ReportPolicy::None;
ReportPolicy zGcsReport = ReportPolicy::None;
+ ReportPolicy zGcsReportDynamic = ReportPolicy::None;
ReportPolicy zExecuteOnlyReport = ReportPolicy::None;
bool ltoBBAddrMap;
llvm::StringRef ltoBasicBlockSections;
@@ -749,6 +750,18 @@ uint64_t errCount(Ctx &ctx);
ELFSyncStream InternalErr(Ctx &ctx, const uint8_t *buf);
+inline StringRef gcsReportPolicytoString(GcsReportPolicy value) {
+ StringRef ret;
+ if (value == GcsReportPolicy::Warning)
+ ret = "warning";
+ else if (value == GcsReportPolicy::Error)
+ ret = "error";
+ else
+ ret = "none";
+
+ return ret;
+}
+
#define CHECK2(E, S) lld::check2((E), [&] { return toStr(ctx, S); })
inline DiagLevel toDiagLevel(ReportPolicy policy) {
diff --git a/lld/ELF/Driver.cpp b/lld/ELF/Driver.cpp
index 35a7f4af9efe4..c5ea0bf1f5568 100644
--- a/lld/ELF/Driver.cpp
+++ b/lld/ELF/Driver.cpp
@@ -56,13 +56,13 @@
#include "llvm/Object/IRObjectFile.h"
#include "llvm/Remarks/HotnessThresholdParser.h"
#include "llvm/Support/CommandLine.h"
-#include "llvm/Support/SaveAndRestore.h"
#include "llvm/Support/Compression.h"
#include "llvm/Support/FileSystem.h"
#include "llvm/Support/GlobPattern.h"
#include "llvm/Support/LEB128.h"
#include "llvm/Support/Parallel.h"
#include "llvm/Support/Path.h"
+#include "llvm/Support/SaveAndRestore.h"
#include "llvm/Support/TarWriter.h"
#include "llvm/Support/TargetSelect.h"
#include "llvm/Support/TimeProfiler.h"
@@ -402,6 +402,8 @@ static void checkOptions(Ctx &ctx) {
ErrAlways(ctx) << "-z pauth-report only supported on AArch64";
if (ctx.arg.zGcsReport != ReportPolicy::None)
ErrAlways(ctx) << "-z gcs-report only supported on AArch64";
+ if (ctx.arg.zGcsReportDynamic != ReportPolicy::None)
+ ErrAlways(ctx) << "-z gcs-report-dynamic only supported on AArch64";
if (ctx.arg.zGcs != GcsPolicy::Implicit)
ErrAlways(ctx) << "-z gcs only supported on AArch64";
}
@@ -574,25 +576,35 @@ static GcsPolicy getZGcs(Ctx &ctx, opt::InputArgList &args) {
return ret;
}
-static ReportPolicy getZGcsReport(Ctx &ctx, opt::InputArgList &args) {
- ReportPolicy ret = ReportPolicy::None;
+static void getZGcsReport(Ctx &ctx, opt::InputArgList &args) {
+ bool reportDynamicDefined = false;
for (auto *arg : args.filtered(OPT_z)) {
std::pair<StringRef, StringRef> kv = StringRef(arg->getValue()).split('=');
- if (kv.first == "gcs-report") {
+ if ((kv.first == "gcs-report") || kv.first == "gcs-report-dynamic") {
arg->claim();
- if (kv.second == "none")
- ret = ReportPolicy::None;
- else if (kv.second == "warning")
- ret = ReportPolicy::Warning;
- else if (kv.second == "error")
- ret = ReportPolicy::Error;
- else
- ErrAlways(ctx) << "unknown -z gcs-report= value: " << kv.second;
+ ReportPolicy value = StringSwitch<ReportPolicy>(kv.second)
+ .Case("none", ReportPolicy::None)
+ .Case("warning", ReportPolicy::Warning)
+ .Case("error", ReportPolicy::Error);
+
+ if (kv.first == "gcs-report")
+ ctx.arg.zGcsReport = value;
+ else if (kv.first == "gcs-report-dynamic") {
+ ctx.arg.zGcsReportDynamic = value;
+ reportDynamicDefined = true;
+ }
}
}
- return ret;
+ // The behaviour of -zgnu-report-dynamic matches that of GNU ld. When
+ // -zgcs-report is set to `warning` or `error`, -zgcs-report-dynamic will
+ // inherit this value if there is no user set value. This detects shared
+ // libraries without the GCS property but does not the shared-libraries to be
+ // rebuilt for successful linking
+ if (!reportDynamicDefined && ctx.arg.zGcsReport != ReportPolicy::None &&
+ ctx.arg.zGcsReportDynamic == ReportPolicy::None)
+ ctx.arg.zGcsReportDynamic = ReportPolicy::Warning;
}
// Report a warning for an unknown -z option.
@@ -1569,7 +1581,10 @@ static void readConfigs(Ctx &ctx, opt::InputArgList &args) {
ctx.arg.zForceBti = hasZOption(args, "force-bti");
ctx.arg.zForceIbt = hasZOption(args, "force-ibt");
ctx.arg.zGcs = getZGcs(ctx, args);
- ctx.arg.zGcsReport = getZGcsReport(ctx, args);
+ // getZGcsReport assings the values for `ctx.arg.zGcsReport` and
+ // `ctx.arg.zGcsReportDynamic within the function. By doing this, it saves
+ // calling the function twice, as both values can be parsed at once.
+ getZGcsReport(ctx, args);
ctx.arg.zGlobal = hasZOption(args, "global");
ctx.arg.zGnustack = getZGnuStack(args);
ctx.arg.zHazardplt = hasZOption(args, "hazardplt");
@@ -1642,10 +1657,11 @@ static void readConfigs(Ctx &ctx, opt::InputArgList &args) {
ErrAlways(ctx) << errPrefix << pat.takeError() << ": " << kv.first;
}
- auto reports = {std::make_pair("bti-report", &ctx.arg.zBtiReport),
- std::make_pair("cet-report", &ctx.arg.zCetReport),
- std::make_pair("execute-only-report", &ctx.arg.zExecuteOnlyReport),
- std::make_pair("pauth-report", &ctx.arg.zPauthReport)};
+ auto reports = {
+ std::make_pair("bti-report", &ctx.arg.zBtiReport),
+ std::make_pair("cet-report", &ctx.arg.zCetReport),
+ std::make_pair("execute-only-report", &ctx.arg.zExecuteOnlyReport),
+ std::make_pair("pauth-report", &ctx.arg.zPauthReport)};
for (opt::Arg *arg : args.filtered(OPT_z)) {
std::pair<StringRef, StringRef> option =
StringRef(arg->getValue()).split('=');
@@ -2927,6 +2943,22 @@ static void readSecurityNotes(Ctx &ctx) {
ctx.arg.andFeatures |= GNU_PROPERTY_AARCH64_FEATURE_1_GCS;
else if (ctx.arg.zGcs == GcsPolicy::Never)
ctx.arg.andFeatures &= ~GNU_PROPERTY_AARCH64_FEATURE_1_GCS;
+
+ // If we are utilising GCS at any stage, the sharedFiles should be checked to
+ // ensure they also support this feature. The gcs-report-dynamic option is
+ // used to indicate if the user wants information relating to this, and will
+ // be set depending on the user's input, or warning if gcs-report is set to
+ // either `warning` or `error`.
+ if (ctx.arg.andFeatures & GNU_PROPERTY_AARCH64_FEATURE_1_GCS)
+ for (SharedFile *f : ctx.sharedFiles)
+ reportUnless(ctx.arg.zGcsReportDynamic,
+ f->andFeatures & GNU_PROPERTY_AARCH64_FEATURE_1_GCS)
+ << f
+ << ": GCS is required by -z gcs, but this shared library lacks the "
+ "necessary property note. The "
+ << "dynamic loader might not enable GCS or refuse to load the "
+ "program unless all shared library "
+ << "dependencies have the GCS marking.";
}
static void initSectionsAndLocalSyms(ELFFileBase *file, bool ignoreComdats) {
diff --git a/lld/ELF/InputFiles.cpp b/lld/ELF/InputFiles.cpp
index d43de8ce6dfef..caab41ed24264 100644
--- a/lld/ELF/InputFiles.cpp
+++ b/lld/ELF/InputFiles.cpp
@@ -918,6 +918,60 @@ void ObjFile<ELFT>::initializeSections(bool ignoreComdats,
handleSectionGroup<ELFT>(this->sections, entries);
}
+template <typename ELFT>
+static void parseGnuPropertyNote(Ctx &ctx, uint32_t &featureAndType,
+ ArrayRef<uint8_t> &desc, ELFFileBase *f,
+ const uint8_t *base,
+ ArrayRef<uint8_t> *data = nullptr) {
+ auto err = [&](const uint8_t *place) -> ELFSyncStream {
+ auto diag = Err(ctx);
+ diag << f->getName() << ":(" << ".note.gnu.property+0x"
+ << Twine::utohexstr(place - base) << "): ";
+ return diag;
+ };
+
+ while (!desc.empty()) {
+ const uint8_t *place = desc.data();
+ if (desc.size() < 8)
+ return void(err(place) << "program property is too short");
+ uint32_t type = read32<ELFT::Endianness>(desc.data());
+ uint32_t size = read32<ELFT::Endianness>(desc.data() + 4);
+ desc = desc.slice(8);
+ if (desc.size() < size)
+ return void(err(place) << "program property is too short");
+
+ if (type == featureAndType) {
+ // We found a FEATURE_1_AND field. There may be more than one of these
+ // in a .note.gnu.property section, for a relocatable object we
+ // accumulate the bits set.
+ if (size < 4)
+ return void(err(place) << "FEATURE_1_AND entry is too short");
+ f->andFeatures |= read32<ELFT::Endianness>(desc.data());
+ } else if (ctx.arg.emachine == EM_AARCH64 &&
+ type == GNU_PROPERTY_AARCH64_FEATURE_PAUTH) {
+ // If the file being parsed is a SharedFile, we cannot pass in
+ // the data variable as there is no InputSection to collect the
+ // data from. As such, these are ignored. They are needed either
+ // when loading a shared library oject.
+ ArrayRef<uint8_t> contents = data ? *data : desc;
+ if (!f->aarch64PauthAbiCoreInfo.empty()) {
+ return void(
+ err(contents.data())
+ << "multiple GNU_PROPERTY_AARCH64_FEATURE_PAUTH entries are "
+ "not supported");
+ } else if (size != 16) {
+ return void(err(contents.data())
+ << "GNU_PROPERTY_AARCH64_FEATURE_PAUTH entry "
+ "is invalid: expected 16 bytes, but got "
+ << size);
+ }
+ f->aarch64PauthAbiCoreInfo = desc;
+ }
+
+ // Padding is present in the note descriptor, if necessary.
+ desc = desc.slice(alignTo<(ELFT::Is64Bits ? 8 : 4)>(size));
+ }
+}
// Read the following info from the .note.gnu.property section and write it to
// the corresponding fields in `ObjFile`:
// - Feature flags (32 bits) representing x86 or AArch64 features for
@@ -955,42 +1009,8 @@ static void readGnuProperty(Ctx &ctx, const InputSection &sec,
// Read a body of a NOTE record, which consists of type-length-value fields.
ArrayRef<uint8_t> desc = note.getDesc(sec.addralign);
- while (!desc.empty()) {
- const uint8_t *place = desc.data();
- if (desc.size() < 8)
- return void(err(place) << "program property is too short");
- uint32_t type = read32<ELFT::Endianness>(desc.data());
- uint32_t size = read32<ELFT::Endianness>(desc.data() + 4);
- desc = desc.slice(8);
- if (desc.size() < size)
- return void(err(place) << "program property is too short");
-
- if (type == featureAndType) {
- // We found a FEATURE_1_AND field. There may be more than one of these
- // in a .note.gnu.property section, for a relocatable object we
- // accumulate the bits set.
- if (size < 4)
- return void(err(place) << "FEATURE_1_AND entry is too short");
- f.andFeatures |= read32<ELFT::Endianness>(desc.data());
- } else if (ctx.arg.emachine == EM_AARCH64 &&
- type == GNU_PROPERTY_AARCH64_FEATURE_PAUTH) {
- if (!f.aarch64PauthAbiCoreInfo.empty()) {
- return void(
- err(data.data())
- << "multiple GNU_PROPERTY_AARCH64_FEATURE_PAUTH entries are "
- "not supported");
- } else if (size != 16) {
- return void(err(data.data())
- << "GNU_PROPERTY_AARCH64_FEATURE_PAUTH entry "
- "is invalid: expected 16 bytes, but got "
- << size);
- }
- f.aarch64PauthAbiCoreInfo = desc;
- }
-
- // Padding is present in the note descriptor, if necessary.
- desc = desc.slice(alignTo<(ELFT::Is64Bits ? 8 : 4)>(size));
- }
+ const uint8_t *base = sec.content().data();
+ parseGnuPropertyNote<ELFT>(ctx, featureAndType, desc, &f, base, &data);
// Go to next NOTE record to look for more FEATURE_1_AND descriptions.
data = data.slice(nhdr->getSize(sec.addralign));
@@ -1418,6 +1438,37 @@ std::vector<uint32_t> SharedFile::parseVerneed(const ELFFile<ELFT> &obj,
return verneeds;
}
+// To determine if a shared file can support any of the GNU Attributes,
+// the .note.gnu.properties section need to be read. The appropriate
+// location in memory is located then the GnuPropertyNote can be parsed.
+// This is the same process as is used for readGnuProperty, however we
+// do not pass the data variable as, without an InputSection, its value
+// is unknown in a SharedFile. This is ok as the information that would
+// be collected from this is irrelevant for a dynamic object.
+template <typename ELFT>
+void SharedFile::parseGnuAndFeatures(const uint8_t *base,
+ const typename ELFT::PhdrRange headers) {
+ if (headers.size() == 0)
+ return;
+ uint32_t featureAndType = ctx.arg.emachine == EM_AARCH64
+ ? GNU_PROPERTY_AARCH64_FEATURE_1_AND
+ : GNU_PROPERTY_X86_FEATURE_1_AND;
+
+ for (unsigned i = 0; i < headers.size(); i++) {
+ if (headers[i].p_type != PT_GNU_PROPERTY)
+ continue;
+ const typename ELFT::Note note(
+ *reinterpret_cast<const typename ELFT::Nhdr *>(base +
+ headers[i].p_offset));
+ if (note.getType() != NT_GNU_PROPERTY_TYPE_0 || note.getName() != "GNU")
+ continue;
+
+ // Read a body of a NOTE record, which consists of type-length-value fields.
+ ArrayRef<uint8_t> desc = note.getDesc(headers[i].p_align);
+ parseGnuPropertyNote<ELFT>(ctx, featureAndType, desc, this, base);
+ }
+}
+
// We do not usually care about alignments of data in shared object
// files because the loader takes care of it. However, if we promote a
// DSO symbol to point to .bss due to copy relocation, we need to keep
@@ -1454,10 +1505,12 @@ template <class ELFT> void SharedFile::parse() {
using Elf_Sym = typename ELFT::Sym;
using Elf_Verdef = typename ELFT::Verdef;
using Elf_Versym = typename ELFT::Versym;
+ using Elf_Phdr = typename ELFT::Phdr;
ArrayRef<Elf_Dyn> dynamicTags;
const ELFFile<ELFT> obj = this->getObj<ELFT>();
ArrayRef<Elf_Shdr> sections = getELFShdrs<ELFT>();
+ ArrayRef<Elf_Phdr> pHeaders = CHECK2(obj.program_headers(), this);
const Elf_Shdr *versymSec = nullptr;
const Elf_Shdr *verdefSec = nullptr;
@@ -1528,6 +1581,7 @@ template <class ELFT> void SharedFile::parse() {
verdefs = parseVerdefs<ELFT>(obj.base(), verdefSec);
std::vector<uint32_t> verneeds = parseVerneed<ELFT>(obj, verneedSec);
+ parseGnuAndFeatures<ELFT>(obj.base(), pHeaders);
// Parse ".gnu.version" section which is a parallel array for the symbol
// table. If a given file doesn't have a ".gnu.version" section, we use
diff --git a/lld/ELF/InputFiles.h b/lld/ELF/InputFiles.h
index 0b186db1ba0d1..579f33ee306e6 100644
--- a/lld/ELF/InputFiles.h
+++ b/lld/ELF/InputFiles.h
@@ -364,6 +364,9 @@ class SharedFile : public ELFFileBase {
template <typename ELFT>
std::vector<uint32_t> parseVerneed(const llvm::object::ELFFile<ELFT> &obj,
const typename ELFT::Shdr *sec);
+ template <typename ELFT>
+ void parseGnuAndFeatures(const uint8_t *base,
+ const typename ELFT::PhdrRange headers);
};
class BinaryFile : public InputFile {
diff --git a/lld/docs/ReleaseNotes.rst b/lld/docs/ReleaseNotes.rst
index 6f60efd87c975..de77b3d30d334 100644
--- a/lld/docs/ReleaseNotes.rst
+++ b/lld/docs/ReleaseNotes.rst
@@ -25,6 +25,11 @@ Non-comprehensive list of changes in this release
ELF Improvements
----------------
+* For AArch64, support for the ``-zgcs-report-dynamic`` option has been added. This will provide users with
+ the ability to check any Dynamic Objects explicitly passed to LLD for the GNU GCS Attribute Flag. This is
+ required for all files when linking with GCS enabled. Unless defined by the user, ``-zgcs-report-dynamic``
+ inherits its value from the ``-zgcs-report`` option, capped at the ``warning`` level to ensure that a users
+ module can still compile. This behaviour is designed to match the GNU ld Linker.
Breaking changes
----------------
diff --git a/lld/test/ELF/aarch64-feature-gcs.s b/lld/test/ELF/aarch64-feature-gcs.s
index 42d40f64d8896..9bca95b11b7b4 100644
--- a/lld/test/ELF/aarch64-feature-gcs.s
+++ b/lld/test/ELF/aarch64-feature-gcs.s
@@ -49,15 +49,34 @@
# REPORT-WARN: warning: func2.o: -z gcs-report: file does not have GNU_PROPERTY_AARCH64_FEATURE_1_GCS property
# REPORT-ERROR: error: func3.o: -z gcs-report: file does not have GNU_PROPERTY_AARCH64_FEATURE_1_GCS property
-## An invalid gcs option should give an error
-# RUN: not ld.lld func1-gcs.o func2-gcs.o func3-gcs.o -z gcs=nonsense 2>&1 | FileCheck --check-prefix=INVALID %s
-
-# INVALID: error: unknown -z gcs= value: nonsense
+## gcs-report-dynamic should report any dynamic objects that does not have the gcs property. This also ensures the inhertance from gcs-report is working correctly.
+
+# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
+# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=warning -z gcs-report=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
+# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=error -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
+# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=error -z gcs-report-dynamic=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
+# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
+# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=error -z gcs-report-dynamic=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
+# RUN: not ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=error -z gcs-report=error -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-ERROR-DYNAMIC %s
+# RUN: not ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=error -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-ERROR-DYNAMIC %s
+# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=error -z gcs-report=error -z gcs=always 2>&1 | count 0
+# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=warning -z gcs-report=error -z gcs=always 2>&1 | count 0
+# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report=warning -z gcs=always 2>&1 | count 0
+# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report=error -z gcs=always 2>&1 | count 0
+# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=warning -z gcs=always 2>&1 | count 0
+# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=error -z gcs=always 2>&1 | count 0
+
+# REPORT-WARN-DYNAMIC: warning: no-gcs.so: GCS is required by -z gcs, but this shared library lacks the necessary property note. The dynamic loader might not enable GCS or refuse to load the program unless all shared library dependencies have the GCS marking.
+# REPORT-WARN-DYNAMIC-NOT: warning: force-gcs.so: GCS is required by -z gcs, but this shared library lacks the necessary property note. The dynamic loader might not enable GCS or refuse to load the program unless all shared library dependencies have the GCS marking.
+# REPORT-ERROR-DYNAMIC: error: no-gcs.so: GCS is required by -z gcs, but this shared library lacks the necessary property note. The dynamic loader might not enable GCS or refuse to load the program unless all shared library dependencies have the GCS marking.
+# REPORT-ERROR-DYNAMIC-NOT: error: force-gcs.so: GCS is required by -z gcs, but this shared library lacks the necessary property note. The dynamic loader might not enable GCS or refuse to load the program unless all shared library dependencies have the GCS marking.
## An invalid gcs option should give an error
-# RUN: not ld.lld func1-gcs.o func2-gcs.o func3-gcs.o -z gcs-report=nonsense 2>&1 | FileCheck --check-prefix=INVALID-GCS-REPORT %s
+# RUN: not ld.lld func1-gcs.o func2-gcs.o func3-gcs.o -z gcs=nonsense -z gcs-report=nonsense -z gcs-report-dynamic=nonsense 2>&1 | FileCheck --check-prefix=INVALID %s
-# INVALID-GCS-REPORT: error: unknown -z gcs-report= value: nonsense
+# INVALID: error: unknown -z gcs= value: nonsense
+# INVALID: error: unknown -z gcs-report= value: nonsense
+# INVALID: error: unknown -z gcs-report-dynamic= value: nonsense
#--- func1-gcs.s
.section ".note.gnu.property", "a"
>From b37c82ecfaf8645a7dc95155e2af3a795fc05fc3 Mon Sep 17 00:00:00 2001
From: Fangrui Song <i at maskray.me>
Date: Mon, 10 Mar 2025 20:28:15 -0700
Subject: [PATCH 3/6] Simplify code
---
lld/ELF/Config.h | 12 ----------
lld/ELF/Driver.cpp | 52 ++++++++++++++++++++++++++----------------
lld/ELF/InputFiles.cpp | 18 +++++++--------
3 files changed, 41 insertions(+), 41 deletions(-)
diff --git a/lld/ELF/Config.h b/lld/ELF/Config.h
index cfeca8b4eed0a..e07c7dd4ca1b6 100644
--- a/lld/ELF/Config.h
+++ b/lld/ELF/Config.h
@@ -750,18 +750,6 @@ uint64_t errCount(Ctx &ctx);
ELFSyncStream InternalErr(Ctx &ctx, const uint8_t *buf);
-inline StringRef gcsReportPolicytoString(GcsReportPolicy value) {
- StringRef ret;
- if (value == GcsReportPolicy::Warning)
- ret = "warning";
- else if (value == GcsReportPolicy::Error)
- ret = "error";
- else
- ret = "none";
-
- return ret;
-}
-
#define CHECK2(E, S) lld::check2((E), [&] { return toStr(ctx, S); })
inline DiagLevel toDiagLevel(ReportPolicy policy) {
diff --git a/lld/ELF/Driver.cpp b/lld/ELF/Driver.cpp
index c5ea0bf1f5568..ef916ff72f496 100644
--- a/lld/ELF/Driver.cpp
+++ b/lld/ELF/Driver.cpp
@@ -578,28 +578,32 @@ static GcsPolicy getZGcs(Ctx &ctx, opt::InputArgList &args) {
static void getZGcsReport(Ctx &ctx, opt::InputArgList &args) {
bool reportDynamicDefined = false;
-
for (auto *arg : args.filtered(OPT_z)) {
std::pair<StringRef, StringRef> kv = StringRef(arg->getValue()).split('=');
- if ((kv.first == "gcs-report") || kv.first == "gcs-report-dynamic") {
- arg->claim();
- ReportPolicy value = StringSwitch<ReportPolicy>(kv.second)
- .Case("none", ReportPolicy::None)
- .Case("warning", ReportPolicy::Warning)
- .Case("error", ReportPolicy::Error);
-
- if (kv.first == "gcs-report")
- ctx.arg.zGcsReport = value;
- else if (kv.first == "gcs-report-dynamic") {
- ctx.arg.zGcsReportDynamic = value;
- reportDynamicDefined = true;
- }
+ if (kv.first != "gcs-report" && kv.first != "gcs-report-dynamic")
+ continue;
+ arg->claim();
+ ReportPolicy value;
+ if (kv.second == "none")
+ value = ReportPolicy::None;
+ else if (kv.second == "warning")
+ value = ReportPolicy::Warning;
+ else if (kv.second == "error")
+ value = ReportPolicy::Error;
+ else {
+ ErrAlways(ctx) << "unknown -z " << kv.first << "= value: " << kv.second;
+ continue;
+ }
+ if (kv.first == "gcs-report") {
+ ctx.arg.zGcsReport = value;
+ } else if (kv.first == "gcs-report-dynamic") {
+ ctx.arg.zGcsReportDynamic = value;
+ reportDynamicDefined = true;
}
}
- // The behaviour of -zgnu-report-dynamic matches that of GNU ld. When
- // -zgcs-report is set to `warning` or `error`, -zgcs-report-dynamic will
- // inherit this value if there is no user set value. This detects shared
+ // When -zgcs-report is set to `warning` or `error`, -zgcs-report-dynamic will
+ // inherit this value if unspecified, matching GNU ld. This detects shared
// libraries without the GCS property but does not the shared-libraries to be
// rebuilt for successful linking
if (!reportDynamicDefined && ctx.arg.zGcsReport != ReportPolicy::None &&
@@ -1581,9 +1585,6 @@ static void readConfigs(Ctx &ctx, opt::InputArgList &args) {
ctx.arg.zForceBti = hasZOption(args, "force-bti");
ctx.arg.zForceIbt = hasZOption(args, "force-ibt");
ctx.arg.zGcs = getZGcs(ctx, args);
- // getZGcsReport assings the values for `ctx.arg.zGcsReport` and
- // `ctx.arg.zGcsReportDynamic within the function. By doing this, it saves
- // calling the function twice, as both values can be parsed at once.
getZGcsReport(ctx, args);
ctx.arg.zGlobal = hasZOption(args, "global");
ctx.arg.zGnustack = getZGnuStack(args);
@@ -2824,6 +2825,17 @@ static void redirectSymbols(Ctx &ctx, ArrayRef<WrappedSymbol> wrapped) {
ctx.symtab->wrap(w.sym, w.real, w.wrap);
}
+static StringRef gcsReportPolicytoString(GcsReportPolicy value) {
+ StringRef ret;
+ if (value == GcsReportPolicy::Warning)
+ ret = "warning";
+ else if (value == GcsReportPolicy::Error)
+ ret = "error";
+ else
+ ret = "none";
+ return ret;
+}
+
// To enable CET (x86's hardware-assisted control flow enforcement), each
// source file must be compiled with -fcf-protection. Object files compiled
// with the flag contain feature flags indicating that they are compatible
diff --git a/lld/ELF/InputFiles.cpp b/lld/ELF/InputFiles.cpp
index caab41ed24264..31c36ca58191d 100644
--- a/lld/ELF/InputFiles.cpp
+++ b/lld/ELF/InputFiles.cpp
@@ -919,13 +919,13 @@ void ObjFile<ELFT>::initializeSections(bool ignoreComdats,
}
template <typename ELFT>
-static void parseGnuPropertyNote(Ctx &ctx, uint32_t &featureAndType,
- ArrayRef<uint8_t> &desc, ELFFileBase *f,
- const uint8_t *base,
+static void parseGnuPropertyNote(Ctx &ctx, ELFFileBase &f,
+ uint32_t featureAndType,
+ ArrayRef<uint8_t> &desc, const uint8_t *base,
ArrayRef<uint8_t> *data = nullptr) {
auto err = [&](const uint8_t *place) -> ELFSyncStream {
auto diag = Err(ctx);
- diag << f->getName() << ":(" << ".note.gnu.property+0x"
+ diag << &f << ":(" << ".note.gnu.property+0x"
<< Twine::utohexstr(place - base) << "): ";
return diag;
};
@@ -946,7 +946,7 @@ static void parseGnuPropertyNote(Ctx &ctx, uint32_t &featureAndType,
// accumulate the bits set.
if (size < 4)
return void(err(place) << "FEATURE_1_AND entry is too short");
- f->andFeatures |= read32<ELFT::Endianness>(desc.data());
+ f.andFeatures |= read32<ELFT::Endianness>(desc.data());
} else if (ctx.arg.emachine == EM_AARCH64 &&
type == GNU_PROPERTY_AARCH64_FEATURE_PAUTH) {
// If the file being parsed is a SharedFile, we cannot pass in
@@ -954,7 +954,7 @@ static void parseGnuPropertyNote(Ctx &ctx, uint32_t &featureAndType,
// data from. As such, these are ignored. They are needed either
// when loading a shared library oject.
ArrayRef<uint8_t> contents = data ? *data : desc;
- if (!f->aarch64PauthAbiCoreInfo.empty()) {
+ if (!f.aarch64PauthAbiCoreInfo.empty()) {
return void(
err(contents.data())
<< "multiple GNU_PROPERTY_AARCH64_FEATURE_PAUTH entries are "
@@ -965,7 +965,7 @@ static void parseGnuPropertyNote(Ctx &ctx, uint32_t &featureAndType,
"is invalid: expected 16 bytes, but got "
<< size);
}
- f->aarch64PauthAbiCoreInfo = desc;
+ f.aarch64PauthAbiCoreInfo = desc;
}
// Padding is present in the note descriptor, if necessary.
@@ -1010,7 +1010,7 @@ static void readGnuProperty(Ctx &ctx, const InputSection &sec,
// Read a body of a NOTE record, which consists of type-length-value fields.
ArrayRef<uint8_t> desc = note.getDesc(sec.addralign);
const uint8_t *base = sec.content().data();
- parseGnuPropertyNote<ELFT>(ctx, featureAndType, desc, &f, base, &data);
+ parseGnuPropertyNote<ELFT>(ctx, f, featureAndType, desc, base, &data);
// Go to next NOTE record to look for more FEATURE_1_AND descriptions.
data = data.slice(nhdr->getSize(sec.addralign));
@@ -1465,7 +1465,7 @@ void SharedFile::parseGnuAndFeatures(const uint8_t *base,
// Read a body of a NOTE record, which consists of type-length-value fields.
ArrayRef<uint8_t> desc = note.getDesc(headers[i].p_align);
- parseGnuPropertyNote<ELFT>(ctx, featureAndType, desc, this, base);
+ parseGnuPropertyNote<ELFT>(ctx, *this, featureAndType, desc, base);
}
}
>From 566048403c3315081e0c1a136f024234d9fb6b82 Mon Sep 17 00:00:00 2001
From: Jack Styles <jack.styles at arm.com>
Date: Tue, 11 Mar 2025 13:30:28 +0000
Subject: [PATCH 4/6] Respond to Review Comments
---
lld/ELF/InputFiles.cpp | 11 ++---------
lld/docs/ReleaseNotes.rst | 9 ++++-----
lld/test/ELF/aarch64-feature-gcs.s | 8 --------
3 files changed, 6 insertions(+), 22 deletions(-)
diff --git a/lld/ELF/InputFiles.cpp b/lld/ELF/InputFiles.cpp
index 31c36ca58191d..970bd1b62234f 100644
--- a/lld/ELF/InputFiles.cpp
+++ b/lld/ELF/InputFiles.cpp
@@ -949,10 +949,6 @@ static void parseGnuPropertyNote(Ctx &ctx, ELFFileBase &f,
f.andFeatures |= read32<ELFT::Endianness>(desc.data());
} else if (ctx.arg.emachine == EM_AARCH64 &&
type == GNU_PROPERTY_AARCH64_FEATURE_PAUTH) {
- // If the file being parsed is a SharedFile, we cannot pass in
- // the data variable as there is no InputSection to collect the
- // data from. As such, these are ignored. They are needed either
- // when loading a shared library oject.
ArrayRef<uint8_t> contents = data ? *data : desc;
if (!f.aarch64PauthAbiCoreInfo.empty()) {
return void(
@@ -1448,11 +1444,8 @@ std::vector<uint32_t> SharedFile::parseVerneed(const ELFFile<ELFT> &obj,
template <typename ELFT>
void SharedFile::parseGnuAndFeatures(const uint8_t *base,
const typename ELFT::PhdrRange headers) {
- if (headers.size() == 0)
+ if (headers.size() == 0 || ctx.arg.emachine != EM_AARCH64)
return;
- uint32_t featureAndType = ctx.arg.emachine == EM_AARCH64
- ? GNU_PROPERTY_AARCH64_FEATURE_1_AND
- : GNU_PROPERTY_X86_FEATURE_1_AND;
for (unsigned i = 0; i < headers.size(); i++) {
if (headers[i].p_type != PT_GNU_PROPERTY)
@@ -1465,7 +1458,7 @@ void SharedFile::parseGnuAndFeatures(const uint8_t *base,
// Read a body of a NOTE record, which consists of type-length-value fields.
ArrayRef<uint8_t> desc = note.getDesc(headers[i].p_align);
- parseGnuPropertyNote<ELFT>(ctx, *this, featureAndType, desc, base);
+ parseGnuPropertyNote<ELFT>(ctx, *this, /*featureAndType*/GNU_PROPERTY_AARCH64_FEATURE_1_AND, desc, base);
}
}
diff --git a/lld/docs/ReleaseNotes.rst b/lld/docs/ReleaseNotes.rst
index de77b3d30d334..f8b0acf9c405c 100644
--- a/lld/docs/ReleaseNotes.rst
+++ b/lld/docs/ReleaseNotes.rst
@@ -25,11 +25,10 @@ Non-comprehensive list of changes in this release
ELF Improvements
----------------
-* For AArch64, support for the ``-zgcs-report-dynamic`` option has been added. This will provide users with
- the ability to check any Dynamic Objects explicitly passed to LLD for the GNU GCS Attribute Flag. This is
- required for all files when linking with GCS enabled. Unless defined by the user, ``-zgcs-report-dynamic``
- inherits its value from the ``-zgcs-report`` option, capped at the ``warning`` level to ensure that a users
- module can still compile. This behaviour is designed to match the GNU ld Linker.
+* For AArch64, added support for ``-zgcs-report-dynamic``, enabling checks for
+GNU GCS Attribute Flags in Dynamic Objects when GCS is enabled. Inherits value
+from ``-zgcs-report`` (capped at ``warning`` level) unless user-defined,
+ensuring compatibility with GNU ld linker.
Breaking changes
----------------
diff --git a/lld/test/ELF/aarch64-feature-gcs.s b/lld/test/ELF/aarch64-feature-gcs.s
index 9bca95b11b7b4..a9cbdd93a6433 100644
--- a/lld/test/ELF/aarch64-feature-gcs.s
+++ b/lld/test/ELF/aarch64-feature-gcs.s
@@ -52,17 +52,9 @@
## gcs-report-dynamic should report any dynamic objects that does not have the gcs property. This also ensures the inhertance from gcs-report is working correctly.
# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
-# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=warning -z gcs-report=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=error -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
-# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=error -z gcs-report-dynamic=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
-# RUN: ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report=error -z gcs-report-dynamic=warning -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-WARN-DYNAMIC %s
-# RUN: not ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=error -z gcs-report=error -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-ERROR-DYNAMIC %s
# RUN: not ld.lld func1-gcs.o func3-gcs.o no-gcs.so force-gcs.so -z gcs-report-dynamic=error -z gcs=always 2>&1 | FileCheck --check-prefix=REPORT-ERROR-DYNAMIC %s
-# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=error -z gcs-report=error -z gcs=always 2>&1 | count 0
-# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=warning -z gcs-report=error -z gcs=always 2>&1 | count 0
-# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report=warning -z gcs=always 2>&1 | count 0
-# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report=error -z gcs=always 2>&1 | count 0
# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=warning -z gcs=always 2>&1 | count 0
# RUN: ld.lld func1-gcs.o func3-gcs.o force-gcs.so -z gcs-report-dynamic=error -z gcs=always 2>&1 | count 0
>From bdea2f75306d41e0f5fc4a8db0f02fea4fd5481b Mon Sep 17 00:00:00 2001
From: Jack Styles <jack.styles at arm.com>
Date: Wed, 12 Mar 2025 09:34:13 +0000
Subject: [PATCH 5/6] Remove `gcsReportPolicytoString` function
This is no longer needed now this PR is using the new
`ReportPolicy` enum.
---
lld/ELF/Driver.cpp | 11 -----------
1 file changed, 11 deletions(-)
diff --git a/lld/ELF/Driver.cpp b/lld/ELF/Driver.cpp
index ef916ff72f496..e66ebaf8c8ff7 100644
--- a/lld/ELF/Driver.cpp
+++ b/lld/ELF/Driver.cpp
@@ -2825,17 +2825,6 @@ static void redirectSymbols(Ctx &ctx, ArrayRef<WrappedSymbol> wrapped) {
ctx.symtab->wrap(w.sym, w.real, w.wrap);
}
-static StringRef gcsReportPolicytoString(GcsReportPolicy value) {
- StringRef ret;
- if (value == GcsReportPolicy::Warning)
- ret = "warning";
- else if (value == GcsReportPolicy::Error)
- ret = "error";
- else
- ret = "none";
- return ret;
-}
-
// To enable CET (x86's hardware-assisted control flow enforcement), each
// source file must be compiled with -fcf-protection. Object files compiled
// with the flag contain feature flags indicating that they are compatible
>From c2af1770c79a3fa2b83c7f2492b2a3a7c42b1ccf Mon Sep 17 00:00:00 2001
From: Jack Styles <jack.styles at arm.com>
Date: Wed, 12 Mar 2025 14:17:44 +0000
Subject: [PATCH 6/6] Fix release notes issue
---
lld/docs/ReleaseNotes.rst | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/lld/docs/ReleaseNotes.rst b/lld/docs/ReleaseNotes.rst
index f8b0acf9c405c..133a6fe87402d 100644
--- a/lld/docs/ReleaseNotes.rst
+++ b/lld/docs/ReleaseNotes.rst
@@ -26,9 +26,9 @@ Non-comprehensive list of changes in this release
ELF Improvements
----------------
* For AArch64, added support for ``-zgcs-report-dynamic``, enabling checks for
-GNU GCS Attribute Flags in Dynamic Objects when GCS is enabled. Inherits value
-from ``-zgcs-report`` (capped at ``warning`` level) unless user-defined,
-ensuring compatibility with GNU ld linker.
+ GNU GCS Attribute Flags in Dynamic Objects when GCS is enabled. Inherits value
+ from ``-zgcs-report`` (capped at ``warning`` level) unless user-defined,
+ ensuring compatibility with GNU ld linker.
Breaking changes
----------------
More information about the llvm-commits
mailing list