Disable spectre v2 options for CC=clang compatibility

This commit is contained in:
Samuel Aubertin 2022-02-23 12:10:23 +01:00
parent 3bb8dd4c00
commit 7c3f78ad43

View File

@ -25,8 +25,8 @@ CFLAGS+= -fstack-clash-protection
CFLAGS+= -pie -fPIE CFLAGS+= -pie -fPIE
# Protect all stacks # Protect all stacks
CFLAGS+= -fstack-protector-all --param ssp-buffer-size=4 CFLAGS+= -fstack-protector-all --param ssp-buffer-size=4
# Enable RETPOLINE against Spectre v2 # Enable RETPOLINE against Spectre v2 (only works with gcc)
CFLAGS+= -mindirect-branch=thunk -mfunction-return=thunk #CFLAGS+= -mindirect-branch=thunk -mfunction-return=thunk
# Link against <openssl.h> # Link against <openssl.h>
LDLIBS= -lssl -lcrypto LDLIBS= -lssl -lcrypto