Skip to content

K
kernel-hardening-checker
Commit 44449903 by Alexander Popov
Options

Fix the comment: SHADOW_CALL_STACK is now available for gcc (Linux 5.18)

parent 9a42a432
Showing with 1 additions and 1 deletions
kconfig_hardened_check/__init__.py
...@@ -488,7 +488,7 @@ def add_kconfig_checks(l, arch): ...@@ -488,7 +488,7 @@ def add_kconfig_checks(l, arch):
l += [AND(KconfigCheck('self_protection', 'my', 'AMD_IOMMU_V2', 'y'), l += [AND(KconfigCheck('self_protection', 'my', 'AMD_IOMMU_V2', 'y'),
iommu_support_is_set)] iommu_support_is_set)]
if arch == 'ARM64': if arch == 'ARM64':
l += [KconfigCheck('self_protection', 'my', 'SHADOW_CALL_STACK', 'y')] # depends on clang, maybe it's alternative to STACKPROTECTOR_STRONG l += [KconfigCheck('self_protection', 'my', 'SHADOW_CALL_STACK', 'y')] # maybe it's alternative to STACKPROTECTOR_STRONG
l += [KconfigCheck('self_protection', 'my', 'KASAN_HW_TAGS', 'y')] l += [KconfigCheck('self_protection', 'my', 'KASAN_HW_TAGS', 'y')]
cfi_clang_is_set = KconfigCheck('self_protection', 'my', 'CFI_CLANG', 'y') cfi_clang_is_set = KconfigCheck('self_protection', 'my', 'CFI_CLANG', 'y')
l += [cfi_clang_is_set] l += [cfi_clang_is_set]
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment