check for control flow integrity support in compiler

libressl · Jan 9, 2024 · b9a8c39 · b9a8c39
1 parent 0022b1a
commit b9a8c39
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/m4/check-hardening-options.m4 b/m4/check-hardening-options.m4
@@ -94,6 +94,11 @@ AC_DEFUN([CHECK_C_HARDENING_OPTIONS], [
 				AC_SEARCH_LIBS([__stack_chk_guard],[ssp])
 			])
 		])
+
+		# Check for control-flow integrity support
+		AS_IF([test "x$HOST_OS" != "xdarwin"], [
+			CHECK_CFLAG([[-fcf-protection=full]])
+		])
 	])
 
 	# Restore CC, LD