summaryrefslogtreecommitdiff
path: root/configure.ac
diff options
context:
space:
mode:
authorLoganaden Velvindron <logan@hackers.mu>2018-02-16 19:35:32 +0400
committerLoganaden Velvindron <logan@hackers.mu>2018-02-16 19:35:32 +0400
commit8c2b5076adf899e39161deaa1be258fb588b124d (patch)
tree871fdca45c26c7936679c9ff312c117b1b34f1ba /configure.ac
parent98e63e5cde1c7063f4e1aaba0980a4b54d576bed (diff)
downloaddropbear-8c2b5076adf899e39161deaa1be258fb588b124d.tar.gz
Add Spectre v2 mitigations for GCC (#54)
Diffstat (limited to 'configure.ac')
-rw-r--r--configure.ac5
1 files changed, 5 insertions, 0 deletions
diff --git a/configure.ac b/configure.ac
index 0e71ffd..f8d1b17 100644
--- a/configure.ac
+++ b/configure.ac
@@ -110,6 +110,11 @@ if test "$hardenbuild" -eq 1; then
)
# FORTIFY_SOURCE
DB_TRYADDCFLAGS([-D_FORTIFY_SOURCE=2])
+
+ # Spectre v2 mitigations
+ DB_TRYADDCFLAGS([-mfunction-return=thunk])
+ DB_TRYADDCFLAGS([-mindirect-branch=thunk])
+
fi
# large file support is useful for scp