ci(aarch64): no -fcf-protection=full on aarch64

diff --git a/.github/workflows/build-and-test-all.yml b/.github/workflows/build-and-test-all.yml
index e86192ffa2c305de28ba1ad71ec7ea8f15e82458..414adfa04c4450bee27f0fe88196a5cdc7b0ef99 100644 (file)
--- a/.github/workflows/build-and-test-all.yml
+++ b/.github/workflows/build-and-test-all.yml
@@ -238,6 +238,8 @@ jobs:
             features: least
           - architecture_suffix: '-arm'
             builder: autotools
+          - architecture_suffix: '-arm'
+            features: least
       fail-fast: false
     container:
       image: "${{ needs.get-runner-container-image.outputs.id }}:${{ needs.get-runner-container-image.outputs.tag }}"

diff --git a/tasks.py b/tasks.py
index a3e4fe96d2dd43ee038b64476c37500b18a05dc1..ebc034356d9fb6fddfe0813b7de9c472664cbc57 100644 (file)
--- a/tasks.py
+++ b/tasks.py
@@ -1,6 +1,7 @@
 import os
 import time
 import json
+import platform
 import requests
 from invoke import task
 from invoke.exceptions import Failure, UnexpectedExit
@@ -454,6 +455,12 @@ def get_optimizations():
     optimizations = os.getenv('OPTIMIZATIONS', 'yes')
     return '-O1' if optimizations == 'yes' else '-O0'
 
+def get_protections():
+    if platform.machine() in ['aarch64', 'arm64']:
+        return "-fcf-protection=check",
+    return "-fcf-protection=full",
+
+
 def get_cflags():
     return " ".join([
         get_optimizations(),
@@ -463,7 +470,6 @@ def get_cflags():
         "-Werror=format-security",
         "-fstack-clash-protection",
         "-fstack-protector-strong",
-        "-fcf-protection=full",
         "-Werror=string-plus-int" if is_compiler_clang() else '',
     ])