Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-86099

Add -mbranch-protection=standard to the extension builder flags

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • redhat-rpm-config-289-1.el10
    • No
    • Moderate
    • ZStream
    • 1
    • rhel-swm
    • ssg_core_services
    • 2
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • PT PRNDL 2025 S05
    • Approved Blocker
    • Hide

      AC: for aarch64, macro %{extension_cflags} is extended with -mbranch-protection=standard

      Testing (on aarch64):

      OLD:
      $ rpm --eval %{extension_cflags}
      -fexceptions

      NEW:
      $ rpm --eval %{extension_cflags}
      -mbranch-protection=standard -fexceptions

      For x86_64 macro %{extension_cflags} still expands to "-fcf-protection -fexceptions" and for the rest of arches to "-fexceptions"

      Show
      AC: for aarch64, macro %{extension_cflags} is extended with -mbranch-protection=standard Testing (on aarch64): OLD: $ rpm --eval %{extension_cflags} -fexceptions NEW: $ rpm --eval %{extension_cflags} -mbranch-protection=standard -fexceptions For x86_64 macro %{extension_cflags} still expands to "-fcf-protection -fexceptions" and for the rest of arches to "-fexceptions"
    • Pass
    • Manual
    • Unspecified
    • Unspecified
    • Unspecified
    • aarch64
    • None

      I'd like to backport https://src.fedoraproject.org/rpms/redhat-rpm-config/c/29331d86f1193118db52c3fc59e6030218bfd0b8?branch=rawhide

      This change is required to prepare Python for the PAC/BTI protections on aarch64 when they are implemented and will be shipped as a y-stream to RHEL10.1 and as a z-stream to RHEL10.0.z

              cstratak@redhat.com Charalampos Stratakis
              cstratak@redhat.com Charalampos Stratakis
              Charalampos Stratakis Charalampos Stratakis
              Eva Mrakova Eva Mrakova
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

                Created:
                Updated:
                Resolved: