Re: [PATCH] meson: Use -fno-sanitize=function when available

[Akihiko Odaki]

On 2024/07/15 16:10, Alex Bennée wrote:
> Akihiko Odaki <akihiko.odaki@daynix.com> writes:
>
> > Commit 23ef50ae2d0c (".gitlab-ci.d/buildtest.yml: Use
> > -fno-sanitize=function in the clang-system job") adds
> > -fno-sanitize=function for the CI but doesn't add the flag in the
> > other context. Move it to meson.build.
> >
> > Signed-off-by: Akihiko Odaki <akihiko.odaki@daynix.com>
> > ---
> >   meson.build                | 1 +
> >   .gitlab-ci.d/buildtest.yml | 1 -
> >   2 files changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/meson.build b/meson.build
> > index 6a93da48e1b5..80447833f07a 100644
> > --- a/meson.build
> > +++ b/meson.build
> > @@ -609,6 +609,7 @@ if host_os != 'openbsd' and \
> >   endif
> >   
> >   qemu_common_flags += cc.get_supported_arguments(hardening_flags)
> > +qemu_common_flags +=
> >   cc.get_supported_arguments('-fno-sanitize=function')
>
> What about checking the other hardening flags?

-fsanitize=function is the only hardening flag that we decided to 
disable for now. Context:
https://lore.kernel.org/qemu-devel/618857e6-dd88-4834-af1b-561228fd7dc1@redhat.com/