From bbfb54930cdd85269504a34b362e77a3ac2a207a Mon Sep 17 00:00:00 2001 From: "H.J. Lu" Date: Wed, 3 Jan 2024 12:09:23 -0800 Subject: i386: Ignore --enable-cet Since shadow stack is only supported for x86-64, ignore --enable-cet for i386. Always setting $(enable-cet) for i386 to "no" to support ifneq ($(enable-cet),no) in x86 Makefiles. We can't use ifeq ($(enable-cet),yes) since $(enable-cet) can be "yes", "no" or "permissive". Reviewed-by: Adhemerval Zanella --- INSTALL | 19 ++++++++----------- 1 file changed, 8 insertions(+), 11 deletions(-) (limited to 'INSTALL') diff --git a/INSTALL b/INSTALL index afd88dc5b1..be3697c62f 100644 --- a/INSTALL +++ b/INSTALL @@ -141,17 +141,14 @@ if ‘CFLAGS’ is specified it must enable optimization. For example: indirect branch tracking (IBT) and shadow stack (SHSTK). When CET is enabled, the GNU C Library is compatible with all existing executables and shared libraries. This feature is currently - supported on i386, x86_64 and x32 with GCC 8 and binutils 2.29 or - later. Note that when CET is enabled, the GNU C Library requires - CPUs capable of multi-byte NOPs, like x86-64 processors as well as - Intel Pentium Pro or newer. With ‘--enable-cet’, it is an error to - dlopen a non CET enabled shared library in CET enabled application. - With ‘--enable-cet=permissive’, CET is disabled when dlopening a - non CET enabled shared library in CET enabled application. - - NOTE: ‘--enable-cet’ has been tested for i686, x86_64 and x32 on - non-CET processors. ‘--enable-cet’ has been tested for i686, - x86_64 and x32 on CET processors. + supported on x86_64 and x32 with GCC 8 and binutils 2.29 or later. + With ‘--enable-cet’, it is an error to dlopen a non CET enabled + shared library in CET enabled application. With + ‘--enable-cet=permissive’, CET is disabled when dlopening a non CET + enabled shared library in CET enabled application. + + NOTE: ‘--enable-cet’ has been tested for x86_64 and x32 on non-CET + and CET processors. ‘--enable-memory-tagging’ Enable memory tagging support if the architecture supports it. -- cgit 1.4.1