From 11d7f4679724158d29d240506592875e8deacaba Mon Sep 17 00:00:00 2001 From: Thomas Nyman Date: Thu, 12 Jun 2025 11:06:00 +0200 Subject: [PATCH] Fix the incorrect Clang version for -fcf-protection=check The -fcf-protection argument check is not currently supported by Clang. Signed-off-by: Thomas Nyman --- .../Compiler-Options-Hardening-Guide-for-C-and-C++.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.md b/docs/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.md index 54809ccb..77f50251 100644 --- a/docs/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.md +++ b/docs/Compiler-Hardening-Guides/Compiler-Options-Hardening-Guide-for-C-and-C++.md @@ -757,7 +757,7 @@ The performance overhead is dependent on the number of function’s instrumented | `-fcf-protection=branch`
| GCC 8.0.0
Clang 7.0.0 | Enable control-flow protection against JOP on x86_64 | | `-fcf-protection=return`
| GCC 8.0.0
Clang 7.0.0 | Enable control-flow protection against ROP on x86_64 | | `-fcf-protection=none`
| GCC 8.0.0
Clang 7.0.0 | Disable control-flow protections | -| `-fcf-protection=check`
| GCC 8.0.0
Clang 7.0.0 | Instruct linker to verify all object files in final link with link-time optimization (LTO) are compiled with identical control-flow protections | +| `-fcf-protection=check`
| GCC 8.0.0 | Instruct linker to verify all object files in final link with link-time optimization (LTO) are compiled with identical control-flow protections | | `-mbranch-protection=standard` | GCC 9.0.0
Clang 8.0.0 | Enable branch protection to counter ROP and JOP attacks on AArch64 | #### Synopsis