diff options
author | emaste <emaste@FreeBSD.org> | 2018-04-08 20:54:13 +0000 |
---|---|---|
committer | emaste <emaste@FreeBSD.org> | 2018-04-08 20:54:13 +0000 |
commit | 875ada2b7927c86747f2461593f7a0a408ccc550 (patch) | |
tree | 5937c8e03eba0b70219d52354c331598fb1c19e0 /share | |
parent | 725ec4ed4a2a5c666764e107c6b19815bc586746 (diff) | |
download | FreeBSD-src-875ada2b7927c86747f2461593f7a0a408ccc550.zip FreeBSD-src-875ada2b7927c86747f2461593f7a0a408ccc550.tar.gz |
MFC r330110: Add kernel retpoline option for amd64
Retpoline is a compiler-based mitigation for CVE-2017-5715, also known
as Spectre V2, that protects against speculative execution branch target
injection attacks.
In this commit it is disabled by default, but will be changed in a
followup commit.
MFC r330962: Remove KERNEL_RETPOLINE from BROKEN_OPTIONS on i386
Clang will compile both amd64 and i386 with retpoline.
Sponsored by: The FreeBSD Foundation
Diffstat (limited to 'share')
0 files changed, 0 insertions, 0 deletions