From b24d630bc1e44f889883e2ec3e00a78679236e10 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 7 Aug 2020 11:50:00 +0000 Subject: [PATCH] make.sh: Remove -mindirect-branch=thunk and -mfunction-return=thunk as default I cannot find any evidence that this is helpful and no other distribution has this as default. Packages that are vulnerable to these attacks (i.e. the kernel) add these flags as appropriate automatically. Signed-off-by: Michael Tremer --- make.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/make.sh b/make.sh index 799aeee660..1a1960674a 100755 --- a/make.sh +++ b/make.sh @@ -146,14 +146,14 @@ configure_build() { BUILDTARGET="${build_arch}-unknown-linux-gnu" CROSSTARGET="${build_arch}-cross-linux-gnu" BUILD_PLATFORM="x86" - CFLAGS_ARCH="-m64 -mindirect-branch=thunk -mfunction-return=thunk -mtune=generic" + CFLAGS_ARCH="-m64 -mtune=generic" ;; i586) BUILDTARGET="${build_arch}-pc-linux-gnu" CROSSTARGET="${build_arch}-cross-linux-gnu" BUILD_PLATFORM="x86" - CFLAGS_ARCH="-march=i586 -mindirect-branch=thunk -mfunction-return=thunk -mtune=generic -fomit-frame-pointer" + CFLAGS_ARCH="-march=i586 -mtune=generic -fomit-frame-pointer" ;; aarch64) -- 2.39.5