compile regular kernels with -fcf-protection=branch, and ramdisks with
authorderaadt <deraadt@openbsd.org>
Sun, 16 Apr 2023 23:57:59 +0000 (23:57 +0000)
committerderaadt <deraadt@openbsd.org>
Sun, 16 Apr 2023 23:57:59 +0000 (23:57 +0000)
commitbc4845413b1871ad113f822a84b0ce143789f000
tree22cb38c0821d32c5bde12685f30563e4fec66321
parent3f5210fd0c343fed91b973dc56991182532e78f9
compile regular kernels with -fcf-protection=branch, and ramdisks with
-fcf-protection=none, regardless of what the compiler default is.
-fcf-protection=branch puts endbr64 instructions on functions which could
be reached indirectly.
ok guenther kettenis
sys/arch/amd64/conf/Makefile.amd64