nvidia-open/repos/extra-x86_64/nvidia-open-gcc-ibt-sls.patch

   1 diff --git a/src/nvidia-modeset/Makefile b/src/nvidia-modeset/Makefile
   2 index c63b86b..a67d2fc 100644
   3 --- a/src/nvidia-modeset/Makefile
   4 +++ b/src/nvidia-modeset/Makefile
   5 @@ -95,7 +95,8 @@ CFLAGS += -ffunction-sections
   6  CFLAGS += -fdata-sections
   7  CFLAGS += -ffreestanding
   8
   9 -CONDITIONAL_CFLAGS := $(call TEST_CC_ARG, -fcf-protection=none)
  10 +CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -fcf-protection=branch)
  11 +CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -mharden-sls=all)
  12  CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -Wformat-overflow=2)
  13  CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -Wformat-truncation=1)
  14  ifeq ($(TARGET_ARCH),x86_64)
  15 diff --git a/src/nvidia/Makefile b/src/nvidia/Makefile
  16 index 9bdb826..3f1e330 100644
  17 --- a/src/nvidia/Makefile
  18 +++ b/src/nvidia/Makefile
  19 @@ -119,7 +119,8 @@ CFLAGS += -fdata-sections
  20  NV_KERNEL_O_LDFLAGS += --gc-sections
  21  EXPORTS_LINK_COMMAND = exports_link_command.txt
  22
  23 -CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -fcf-protection=none)
  24 +CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -fcf-protection=branch -mindirect-branch-register)
  25 +CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -mharden-sls=all)
  26
  27  ifeq ($(TARGET_ARCH),x86_64)
  28    CONDITIONAL_CFLAGS += $(call TEST_CC_ARG, -mindirect-branch-register)