summaryrefslogtreecommitdiff
path: root/config/cet.m4
blob: df4fcc1def2c1fc3af92f27cf10bf5fd981c25bb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
dnl
dnl GCC_CET_FLAGS
dnl    (SHELL-CODE_HANDLER)
dnl
AC_DEFUN([GCC_CET_FLAGS],[dnl
GCC_ENABLE(cet, default, ,[enable Intel CET in target libraries],
	   permit yes|no|default)
case "$host" in
  i[[34567]]86-*-linux* | x86_64-*-linux*)
    case "$enable_cet" in
      default)
	# Check if assembler supports CET.
	AC_COMPILE_IFELSE(
	 [AC_LANG_PROGRAM(
	  [],
	  [asm ("setssbsy");])],
	 [enable_cet=yes],
	 [enable_cet=no])
	;;
      yes)
	# Check if assembler supports CET.
	AC_COMPILE_IFELSE(
	 [AC_LANG_PROGRAM(
	  [],
	  [asm ("setssbsy");])],
	 [],
	 [AC_MSG_ERROR([assembler with CET support is required for --enable-cet])])
	;;
    esac
    ;;
  *)
    enable_cet=no
    ;;
esac
if test x$enable_cet = xyes; then
  $1="-fcf-protection -mcet"
fi
])

AC_DEFUN([GCC_CET_LDFLAGS],[dnl
GCC_ENABLE(cet-property, no, ,[enable Intel CET property in target libraries],
	   permit yes|no|default)
case "$host" in
  i[[34567]]86-*-linux* | x86_64-*-linux*)
    if test x$enable_cet_property = xyes; then
      # Check if CET is enabled.
      if test x$enable_cet != xyes; then
	AC_MSG_ERROR([CET must be enabled for --enable-cet-property])
      fi
    fi
    ;;
  *)
    enable_cet_property=no
    ;;
esac
if test x$enable_cet_property = xyes; then
  $1="-Wl,-z,ibt,-z,shstk"
fi
])