Closes: https://bugs.gentoo.org/646076
Signed-off-by: Sam James <s...@gentoo.org>
---
 eclass/flag-o-matic.eclass | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass
index 37577209281a1..d6590a2e52dfd 100644
--- a/eclass/flag-o-matic.eclass
+++ b/eclass/flag-o-matic.eclass
@@ -55,6 +55,11 @@ _setup-allowed-flags() {
                '-fstack-check*' -fno-stack-check
                -fbounds-check -fbounds-checking
                -fno-PIE -fno-pie -nopie -no-pie
+               # Spectre mitigations, bug #646076
+               '-mindirect-branch=*'
+               -mindirect-branch-register
+               '-mfunction-return=*'
+               -mretpoline
 
                # Misc
                -fno-unit-at-a-time -fno-strict-overflow
-- 
2.34.1


Reply via email to