tor

commit a08ac1ad0e665754ca8dd111171f01f37278d18a
parent 03e64e3fbfa1c89014a575e128d8cf05104b1238
Author: David Goulet <dgoulet@torproject.org>
Date:   Tue, 11 Nov 2025 14:12:58 -0500

compiler: Add -mbranch-protection=standard for arm64

Signed-off-by: David Goulet <dgoulet@torproject.org>

Diffstat:
M
changes/gcc-fcf
 | 
1
+
M
configure.ac
 | 
2
++

2 files changed, 3 insertions(+), 0 deletions(-)
diff --git a/changes/gcc-fcf b/changes/gcc-fcf
@@ -1,3 +1,4 @@
   o Minor feature (compiler flag):
     - Add -fcf-protection=full if supported by the compiler. Fixes 41139.
+    - Add -mbranch-protection=standard for arm64.
 
diff --git a/configure.ac b/configure.ac
@@ -1498,6 +1498,8 @@ TOR_CHECK_CFLAGS(-fasynchronous-unwind-tables)
 # intended to protect against such threats as Return-oriented Programming
 # (ROP), and similarly call/jmp-oriented programming (COP/JOP).
 TOR_CHECK_CFLAGS(-fcf-protection=full)
+# The equivalent for arm64 (#41139)
+TOR_CHECK_CFLAGS(-mbranch-protection=standard)
 
 dnl ============================================================
 dnl Check for libseccomp