File tree Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Original file line number Diff line number Diff line change @@ -19,11 +19,12 @@ of undefined behavior that can potentially allow attackers to subvert the
1919program's control flow. These schemes have been optimized for performance,
2020allowing developers to enable them in release builds.
2121
22- To enable Clang's available CFI schemes, use the flag ``-fsanitize=cfi ``.
23- You can also enable a subset of available :ref: `schemes <cfi-schemes >`.
24- As currently implemented, all schemes rely on link-time optimization (LTO);
25- so it is required to specify ``-flto ``, and the linker used must support LTO,
26- for example via the `gold plugin `_.
22+ To enable Clang's available CFI schemes, use the flag
23+ ``-fsanitize=cfi ``. You can also enable a subset of available
24+ :ref: `schemes <cfi-schemes >`. As currently implemented, all schemes
25+ except for ``kcfi `` rely on link-time optimization (LTO); so it is
26+ required to specify ``-flto `` or ``-flto=thin ``, and the linker used
27+ must support LTO, for example via the `gold plugin `_.
2728
2829To allow the checks to be implemented efficiently, the program must
2930be structured such that certain object files are compiled with CFI
You can’t perform that action at this time.
0 commit comments