Commit cc49c71d authored by Sami Tolvanen's avatar Sami Tolvanen Committed by Will Deacon
Browse files

efi/libstub: Disable Shadow Call Stack 



Shadow stacks are not available in the EFI stub, filter out SCS flags.

Suggested-by: default avatarJames Morse <james.morse@arm.com>
Signed-off-by: default avatarSami Tolvanen <samitolvanen@google.com>
Reviewed-by: default avatarKees Cook <keescook@chromium.org>
Acked-by: default avatarArd Biesheuvel <ardb@kernel.org>
Signed-off-by: default avatarWill Deacon <will@kernel.org>
parent 439dc2a1

drivers/firmware/efi/libstub/Makefile

+3 −0
Original line number Diff line number Diff line
@@ -32,6 +32,9 @@ KBUILD_CFLAGS := $(cflags-y) -DDISABLE_BRANCH_PROFILING \ 
				   $(call cc-option,-fno-stack-protector) \

				   -D__DISABLE_EXPORTS



# remove SCS flags from all objects in this directory

KBUILD_CFLAGS := $(filter-out $(CC_FLAGS_SCS), $(KBUILD_CFLAGS))



GCOV_PROFILE			:= n

KASAN_SANITIZE			:= n

UBSAN_SANITIZE			:= n