freebsd-dev/sys/boot/Makefile.inc

# $FreeBSD$

SSP_CFLAGS=

.if ${MACHINE_CPUARCH} == "arm"
# Do not generate movt/movw, because the relocation fixup for them does not
# translate to the -Bsymbolic -pie format required by self_reloc() in loader(8).
# Also, the fpu is not available in a standalone environment.
CFLAGS.clang+=  -mllvm -arm-use-movt=0
CFLAGS.clang+=  -mfpu=none
.endif
Enable GCC stack protection (aka Propolice) for userland: - It is opt-out for now so as to give it maximum testing, but it may be turned opt-in for stable branches depending on the consensus. You can turn it off with WITHOUT_SSP. - WITHOUT_SSP was previously used to disable the build of GNU libssp. It is harmless to steal the knob as SSP symbols have been provided by libc for a long time, GNU libssp should not have been much used. - SSP is disabled in a few corners such as system bootstrap programs (sys/boot), process bootstrap code (rtld, csu) and SSP symbols themselves. - It should be safe to use -fstack-protector-all to build world, however libc will be automatically downgraded to -fstack-protector because it breaks rtld otherwise. - This option is unavailable on ia64. Enable GCC stack protection (aka Propolice) for kernel: - It is opt-out for now so as to give it maximum testing. - Do not compile your kernel with -fstack-protector-all, it won't work. Submitted by: Jeremie Le Hen <jeremie@le-hen.org> 2008-06-25 21:33:28 +00:00			`# $FreeBSD$`

Fix build when WITH_SSP is set explicitly. Submitted by: Jeremie Le Hen 2009-02-21 15:04:31 +00:00			`SSP_CFLAGS=`
Stop clang from generating movt/movw sequences. These don't get relocated so will access data from an unrelocated address. This is only needed for self relocating code on ARMv7, however this is true for both ubldr and loader.efi, the only two loaders we support on ARMv7. While here also force the fpu to be none as is done in libstand. Sponsored by: ABT Systems Ltd 2016-02-09 00:15:41 +00:00
			`.if ${MACHINE_CPUARCH} == "arm"`
			`# Do not generate movt/movw, because the relocation fixup for them does not`
			`# translate to the -Bsymbolic -pie format required by self_reloc() in loader(8).`
			`# Also, the fpu is not available in a standalone environment.`
			`CFLAGS.clang+= -mllvm -arm-use-movt=0`
			`CFLAGS.clang+= -mfpu=none`
			`.endif`