nixpkgs/pkgs/stdenv/linux
Franz Pletz 3db93c351d cc-wrapper: add stack clash protection hardening flag
Most Linux distributions are enabling this these days and it does
protect against real world vulnerabilities as demonstrated by
CVE-2018-16864 and CVE-2018-16865.

Fix #53753.

Information on llvm version support gleaned from
6609892a2d
68e07da3e5
092507a730

Information on gcc version support a lot harder to gather,
but both 32bit and 64bit arm do appear to be supported
based on the test suite.
2024-06-07 20:23:46 +01:00
..
bootstrap-files pkgs/stdenv/linux: init powerpc64-unknown-linux-gnuabielfv2 bootstrap-files 2024-03-10 12:36:34 +01:00
bootstrap-tools cc-wrapper: add stack clash protection hardening flag 2024-06-07 20:23:46 +01:00
bootstrap-tools-musl cc-wrapper: add trivialautovarinit hardening flag support 2024-02-24 12:00:09 +00:00
default.nix wrapCC, wrapBintools: move expand-response-params bootstrapping out 2024-04-18 20:49:13 +02:00
make-bootstrap-tools-cross.nix pkgs/stdenv/linux/make-bootstrap-tools-cross: Add powerpc64 entry 2024-03-04 15:01:29 +01:00
make-bootstrap-tools.nix pkgs/top-level/release.nix: drop unused dist targets 2024-04-04 21:40:08 +01:00