Changeset 706265a for general/prog/llvm.xml

Timestamp:

09/10/2022 06:21:54 PM (2 years ago)

Author:

Bruce Dubbs <bdubbs@…>

Branches:

11.3, 12.0, 12.1, 12.2, gimp3, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, xry111/for-12.3, xry111/llvm18, xry111/soup3, xry111/spidermonkey128, xry111/xf86-video-removal

Children:

e51029f

Parents:

7b459c22 (diff), 08c7ccd (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.

Message:

Merge branch 'trunk' of git.linuxfromscratch.org:blfs into trunk

File:

• general/prog/llvm.xml (modified) (3 diffs)

general/prog/llvm.xml

@@ -152 +152 @@
         <listitem>
           <para>
-            SSP patch:
+            Patch enabling <xref linkend="gSSP"/> by default in clang:
             <ulink url="&patch-root;/clang-&llvm-version;-enable_default_ssp-1.patch"/>
           </para>
@@ -236 +236 @@
      before applying -i -->
 <screen><userinput remap="pre">patch -Np2 -d projects/compiler-rt &lt;../compiler-rt-14.0.6-glibc_2_36-1.patch</userinput></screen>
+
+    <para>
+      If you have downloaded <application>clang</application>,
+      apply the following patch to enable <xref linkend="gSSP"/> by default
+      in compiled programs.
+    </para>
+<!-- need <../<patch> instead of -i because -d changes directory
+     before applying -i -->
 <screen><userinput remap="pre">patch -Np2 -d tools/clang &lt;../clang-&llvm-version;-enable_default_ssp-1.patch</userinput></screen>
 
@@ -391 +399 @@
       benchmarks. This option requires additional code that
       is not currently available.
+    </para>
+
+    <para>
+      <parameter>-DCLANG_DEFAULT_PIE_ON_LINUX=ON</parameter>: makes
+      <option>-fpie</option> option the default when compiling programs.
+      Together with the <xref linkend="gASLR"/> feature enabled in the kernel,
+      this defeats some kind of attacks based on known memory layouts.
     </para>