File tree Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Expand file tree Collapse file tree 1 file changed +6
-5
lines changed Original file line number Diff line number Diff line change @@ -19,11 +19,12 @@ of undefined behavior that can potentially allow attackers to subvert the
19
19
program's control flow. These schemes have been optimized for performance,
20
20
allowing developers to enable them in release builds.
21
21
22
- To enable Clang's available CFI schemes, use the flag ``-fsanitize=cfi ``.
23
- You can also enable a subset of available :ref: `schemes <cfi-schemes >`.
24
- As currently implemented, all schemes rely on link-time optimization (LTO);
25
- so it is required to specify ``-flto ``, and the linker used must support LTO,
26
- for example via the `gold plugin `_.
22
+ To enable Clang's available CFI schemes, use the flag
23
+ ``-fsanitize=cfi ``. You can also enable a subset of available
24
+ :ref: `schemes <cfi-schemes >`. As currently implemented, all schemes
25
+ except for ``kcfi `` rely on link-time optimization (LTO); so it is
26
+ required to specify ``-flto `` or ``-flto=thin ``, and the linker used
27
+ must support LTO, for example via the `gold plugin `_.
27
28
28
29
To allow the checks to be implemented efficiently, the program must
29
30
be structured such that certain object files are compiled with CFI
You can’t perform that action at this time.
0 commit comments