508b0d26a2
For the 32-bit ARM build of imx_v6_v7_defconfig+allmodconfig, GCC plugins don't work properly for the gcc-12 (12.2.0) toolchain used by kernelci. Work around this issue by inhibiting the use of plugins for 32-bit ARM builds. With GCC plugins enabled, 32-bit ARM builds of imx_v6_v7_defconfig+allmodconfig fail with: arm-linux-gnueabihf-ld: arch/arm/boot/compressed/atags_to_fdt.o: in function `atags_to_fdt': atags_to_fdt.c:(.text.atags_to_fdt+0x18): undefined reference to `stackleak_track_stack' Bug: 393580166 Signed-off-by: Todd Kjos <tkjos@google.com> Change-Id: Ic67fb5c89614f4dcc656df1da8b70fe1c016c559
56 lines
1.8 KiB
Plaintext
56 lines
1.8 KiB
Plaintext
# SPDX-License-Identifier: GPL-2.0-only
|
|
config HAVE_GCC_PLUGINS
|
|
bool
|
|
help
|
|
An arch should select this symbol if it supports building with
|
|
GCC plugins.
|
|
|
|
menuconfig GCC_PLUGINS
|
|
bool "GCC plugins"
|
|
depends on HAVE_GCC_PLUGINS
|
|
depends on CC_IS_GCC
|
|
# ANDROID: GCC_PLUGINS are broken for 32-bit ARM builds (gcc 12.2.0)
|
|
depends on !ARM
|
|
depends on $(success,test -e $(shell,$(CC) -print-file-name=plugin)/include/plugin-version.h)
|
|
default y
|
|
help
|
|
GCC plugins are loadable modules that provide extra features to the
|
|
compiler. They are useful for runtime instrumentation and static analysis.
|
|
|
|
See Documentation/kbuild/gcc-plugins.rst for details.
|
|
|
|
if GCC_PLUGINS
|
|
|
|
config GCC_PLUGIN_SANCOV
|
|
bool
|
|
# Plugin can be removed once the kernel only supports GCC 6+
|
|
depends on !CC_HAS_SANCOV_TRACE_PC
|
|
help
|
|
This plugin inserts a __sanitizer_cov_trace_pc() call at the start of
|
|
basic blocks. It supports all gcc versions with plugin support (from
|
|
gcc-4.5 on). It is based on the commit "Add fuzzing coverage support"
|
|
by Dmitry Vyukov <dvyukov@google.com>.
|
|
|
|
config GCC_PLUGIN_LATENT_ENTROPY
|
|
bool "Generate some entropy during boot and runtime"
|
|
help
|
|
By saying Y here the kernel will instrument some kernel code to
|
|
extract some entropy from both original and artificially created
|
|
program state. This will help especially embedded systems where
|
|
there is little 'natural' source of entropy normally. The cost
|
|
is some slowdown of the boot process (about 0.5%) and fork and
|
|
irq processing.
|
|
|
|
Note that entropy extracted this way is not cryptographically
|
|
secure!
|
|
|
|
This plugin was ported from grsecurity/PaX. More information at:
|
|
* https://grsecurity.net/
|
|
* https://pax.grsecurity.net/
|
|
|
|
config GCC_PLUGIN_ARM_SSP_PER_TASK
|
|
bool
|
|
depends on GCC_PLUGINS && ARM
|
|
|
|
endif
|