Skip to content

Commit 984ec70

Browse files
committed
Minor documentation update.
1 parent 8c22f56 commit 984ec70

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

clang/docs/ControlFlowIntegrity.rst

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -19,11 +19,12 @@ of undefined behavior that can potentially allow attackers to subvert the
1919
program's control flow. These schemes have been optimized for performance,
2020
allowing developers to enable them in release builds.
2121

22-
To enable Clang's available CFI schemes, use the flag ``-fsanitize=cfi``.
23-
You can also enable a subset of available :ref:`schemes <cfi-schemes>`.
24-
As currently implemented, all schemes rely on link-time optimization (LTO);
25-
so it is required to specify ``-flto``, and the linker used must support LTO,
26-
for example via the `gold plugin`_.
22+
To enable Clang's available CFI schemes, use the flag
23+
``-fsanitize=cfi``. You can also enable a subset of available
24+
:ref:`schemes <cfi-schemes>`. As currently implemented, all schemes
25+
except for ``kcfi`` rely on link-time optimization (LTO); so it is
26+
required to specify ``-flto`` or ``-flto=thin``, and the linker used
27+
must support LTO, for example via the `gold plugin`_.
2728

2829
To allow the checks to be implemented efficiently, the program must
2930
be structured such that certain object files are compiled with CFI

0 commit comments

Comments
 (0)