buildflags.md: Document -mbranch-protection=standard for aarch64

This commit is contained in:
Florian Weimer 2021-11-15 12:32:38 +01:00
parent 92261d7c20
commit 76114fa60e

View File

@ -264,6 +264,8 @@ not), but their selection depends on the architecture:
ppc64le, s390x, x86_64). ppc64le, s390x, x86_64).
* `-fcf-protection`: Instrument binaries to guard against * `-fcf-protection`: Instrument binaries to guard against
ROP/JOP attacks. Used on i686 and x86_64. ROP/JOP attacks. Used on i686 and x86_64.
* `-mbranch-protection=standard`: Instrument binaries to guard against
ROP/JOP attacks. Used on aarch64.
* `-m64` and `-m32`: Some GCC builds support both 32-bit and 64-bit in * `-m64` and `-m32`: Some GCC builds support both 32-bit and 64-bit in
the same compilation. For such architectures, the RPM build process the same compilation. For such architectures, the RPM build process
explicitly selects the architecture variant by passing this compiler explicitly selects the architecture variant by passing this compiler