search for: fcf

Dear All, I am building R from source[1], following what is done in "rules" for building Debian's R. But the R I generate, in contrast to the standard Debian's R, will not change the BLAS and LAPACK libraries it uses when I change them via "update-alternatives". I have no idea what I am doing wrong (but, somehow, I've been quite capable of making the same

Hi All, Jump Oriented Programming attacks rely on tampering addresses used by indirect call / jmp, e.g. redirect control-flow to non-programmer intended bytes in binary. A new target independent command line option -fcf-protection=<branch/return/full/none> instruments control flow protection schemes to handle such attacks. X86 Supports Indirect Branch Tracking (IBT) as part of Control-Flow Enforcement Technology (CET). IBT instruments ENDBR instructions (when -fcf-protection=branch is asserted) used to speci...

...h_test.o vringh.o virtio_ring.o > > -CFLAGS += -g -O2 -Werror -Wno-maybe-uninitialized -Wall -I. -I../include/ -I ../../usr/include/ -Wno-pointer-sign -fno-strict-overflow -fno-strict-aliasing -fno-common -MMD -U_FORTIFY_SOURCE -include ../../include/linux/kconfig.h -mfunction-return=thunk -fcf-protection=none -mindirect-branch-register > +TMPOUT = .tmp_$$$$ if you are going to do this pls use mktemp. But I don't see why not just use -o /dev/null > +try-run = $(shell set -e; \ > + TMP=$(TMPOUT)/tmp; \ > + trap "rm -rf $(TMPOUT)" EXIT; \ > + mkdir -p $(TMPO...

...ngh_test.o vringh.o virtio_ring.o > > -CFLAGS += -g -O2 -Werror -Wno-maybe-uninitialized -Wall -I. -I../include/ -I ../../usr/include/ -Wno-pointer-sign -fno-strict-overflow -fno-strict-aliasing -fno-common -MMD -U_FORTIFY_SOURCE -include ../../include/linux/kconfig.h -mfunction-return=thunk -fcf-protection=none -mindirect-branch-register > +try-run = $(shell set -e; \ > + if ($(1)) >/dev/null 2>&1; \ > + then echo "$(2)"; \ > + else echo "$(3)"; \ > + fi) > + > +__cc-option = $(call try-run,\ > + $(1) -Werror $(2) -c -x c /dev/null -...

On Tue, 21 May 2024 14:48:48 +0200 Kurt Hornik <Kurt.Hornik at wu.ac.at> wrote: > I guess foer the CXXFLAGS we want dpkg-buildflags --get CXXFLAGS? It must be the case. It's both the documented option [1] and it currently differs from CFLAGS in the offending flag: root at 93e09ba5b6fb:/# diff -u <(dpkg-buildflags --get CFLAGS | sed 's/ /\n/g') <(dpkg-buildflags --get

...error=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -flto -o libipt_icmp.oo -c libipt_icmp.c; libipt_icmp.c: In function ‘type_xlate_print’: libipt_icmp.c:239:5: error: format not a string literal and no format arguments [-Werror=format-security] 239 | xt_xlate_add(xl, icmp_codes[i].name); | ^~~~~~~~~~~~ cc1: some warnings...

...=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' --extra-ldflags='-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld ' --extra-cflags=' ' --enable-libopencore-amrnb --enable-libopencore-amrwb --enable-libvo-amrwbenc --enable-version3 --enable-bzlib --disable-crystalhd --enable-fontconfig --e...

...mp;a=search&h=743b05ae4918eac3437965016649b2cabbdbb819&st=commit&s=intel+cet Technology is backwards compatible. I used GCC version 8.0.1 20180319 (experimental) for experiments. For following code and invocations: 1.cpp: int xxx() { return 1; } /usr/local/bin/gcc 1.cpp -c -o test1.o -fcf-protection=full -mcet -B. /usr/local/bin/gcc 1.cpp -c -o test2.o -B. Compiler will generate special instructions and emit .note.gnu.property section. test1.o: 0000000000000000 <_Z3xxxv>: 0: f3 0f 1e fa endbr64 4: b8 01 00 00 00 mov $0x1,%eax 9: c3...

...URCE -include ../../include/linux/kconfig.h +CFLAGS += -g -O2 -Werror -Wno-maybe-uninitialized -Wall -I. -I../include/ -I ../../usr/include/ -Wno-pointer-sign -fno-strict-overflow -fno-strict-aliasing -fno-common -MMD -U_FORTIFY_SOURCE -include ../../include/linux/kconfig.h -mfunction-return=thunk -fcf-protection=none -mindirect-branch-register CFLAGS += -pthread LDFLAGS += -pthread vpath %.c ../../drivers/virtio ../../drivers/vhost -- 2.25.1

...65016649b2cabbdbb819&st=commit&s=intel+cet > > Technology is backwards compatible. I used GCC version 8.0.1 20180319 > (experimental) for experiments. > For following code and invocations: > 1.cpp: > int xxx() { return 1; } > > /usr/local/bin/gcc 1.cpp -c -o test1.o -fcf-protection=full -mcet -B. > /usr/local/bin/gcc 1.cpp -c -o test2.o -B. > > Compiler will generate special instructions and emit .note.gnu.property section. > test1.o: > 0000000000000000 <_Z3xxxv>: > 0:f3 0f 1e fa endbr64 > 4:b8 01 00 00 00 mov $0x1...

...error=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' --extra-ldflags='-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld ' --extra-cflags=' ' --enable-libopencore-amrnb --enable-libopencore-amrwb --enable-libvo-amrwbenc --enable-version3 --enable-bzlib --disable-crystalhd --enable-fontconfig --enable...

On 18/11/2020 19:27, Rommel Rodriguez Toirac wrote: > > ?It is /etc/named.conf and /etc/samba/smb.conf > > > # cat /etc/named.conf > > > ??tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; > > > include "/usr/local/samba/bind-dns/named.conf"; > OK, does the /usr/local/samba/bind-dns directory exist ? if it does, is the

...rror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/ redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' 'CPPFLAGS= -DDIG_SIGCHASE' 'PKG_CONFIG_PATH=:/ usr/lib64/pkgconfig:/usr/share/pkgconfig' compiled by GCC 8.3.1 20191121 (Red Hat 8.3.1-5) compiled with OpenSSL version: OpenSSL 1....

...OpenMP 4.5 support in Clang. [r322018](http://reviews.llvm.org/rL322018). * Initial RISC-V target definition and compiler driver has been added. ABI lowering will land upstream shortly too. [r322276](http://reviews.llvm.org/rL322276). * A new target-independent control flow protection flag '-fcf-protection' has been added. This requests that the backend instruments control flow. [r322063](http://reviews.llvm.org/rL322063). ## Other project commits * LLD's relocation processing has been rewritten and refactored. [r322047](http://reviews.llvm.org/rL322047). * libFuzzer now suppor...

Hi all, I encountered an error while compiling Linux kernel 5.3 to IR. My LLVM version is 9.0.0 release. This error said "invalid operand for inline asm constraint 'i'" in arch/x86/include/asm/jump_table.h. The source code is static __always_inline bool arch_static_branch(struct static_key *key, bool branch) { asm_volatile_goto("1:" ".byte "

...s need shcore.dll.GetScaleFactorForMonitor stub (Karafun player, Sync) 48077 UPlay fails to start : "Error at hooking API NtProtectVirtualMemory" (UPlay's hooking engine can't handle ENDBR32 instruction inserted at non-hotpatch API entries due to distro build environments '-fcf-protection') 48082 Visual C++ Express 2005 needs shell32.PathResolveW implementation (or fake success) 48088 Wrong color mapping with client-side graphics on 256-color X server 48242 IXMLDOMDocument_load() paths aren't URL-unescaped (Microsoft Document Explorer 2008 startup error)...

....A.R. 2: Project Origin screen is completely light grey while playing intro movie 46626 UPlay fails to start : "Error at hooking API LoadStringA" (UPlay's hooking engine can't handle ENDBR32 instruction inserted at non-hotpatch API entries due to distro build environments '-fcf-protection') 46706 Eventide H9 Control crashes on unimplemented function bthprops.cpl.BluetoothFindDeviceClose 46711 Since 3.3 other HID devices than Joysticks not supported anymore 46712 Atelier Firis config tool crashes with "Unhandled page fault on execute access" 46713...

...46378 WarGaming.net Game Center crashes when installing games or self-updates 46626 UPlay fails to start : "Error at hooking API LoadStringA" (UPlay's hooking engine can't handle ENDBR32 instruction inserted at non-hotpatch API entries due to distro build environments '-fcf-protection') 46685 AviUtl: Can't specify 4 digits number as image size in new project dialog. 46794 Skyrim crashes upon clicking Continue on macOS 46899 SIMATIC WinCC V15.1 Runtime installer: user can't accept license terms (richedit20 ITextRange::ScrollIntoView lacks handling...

...n't scroll to newly selected item 47960 chcp.com does not exist 48077 UPlay fails to start : "Error at hooking API NtProtectVirtualMemory" (UPlay's hooking engine can't handle ENDBR32 instruction inserted at non-hotpatch API entries due to distro build environments '-fcf-protection') 48082 Visual C++ Express 2005 needs shell32.PathResolveW implementation (or fake success) 48153 Mono's ProcessTest.Start1_FileName_Whitespace test fails 48185 Applications crashing with "Not enough memory to run application" 48211 Regression: midl.exe fail...