-fstack-clash-protection suggested by Arfrever.
Reported-by: Arfrever Frehtes Taifersar Arahesis <arfre...@apache.org>
Signed-off-by: Sam James <s...@gentoo.org>
---
eclass/flag-o-matic.eclass | 2 ++
1 file changed, 2 insertions(+)
diff --git a/eclass/flag-o-matic.eclass b/eclass/flag-o-matic.eclass
index 7ac4f4a7791d1..062bd04e2e0bd 100644
--- a/eclass/flag-o-matic.eclass
+++ b/eclass/flag-o-matic.eclass
@@ -53,6 +53,8 @@ _setup-allowed-flags() {
# Hardening flags
'-fstack-protector*'
'-fstack-check*' -fno-stack-check
+ -fstack-clash-protection
+ '-fcf-protection=*'
-fbounds-check -fbounds-checking
-fno-PIE -fno-pie -nopie -no-pie
# Spectre mitigations, bug #646076
--
2.34.1
