1 |
On Sunday 19 June 2005 02:53 pm, Simon Strandman wrote: |
2 |
> I just checked make.defaults for the x86 hardened profile and it has |
3 |
> CFLAGS="-O2 -mcpu=i386 -pipe -fforce-addr". |
4 |
> |
5 |
> Why the -fforce-addr? Does it have any impact on security? |
6 |
> |
7 |
> I use hardened on my home server but I don't have -fforce-addr in its |
8 |
> CFLAGS. Should I add it? |
9 |
> |
10 |
> -- |
11 |
> Simon Strandman <simon.strandman@×××××.com> |
12 |
The ggc man page stages |
13 |
|
14 |
-fforce-addr |
15 |
Force memory address constants to be copied into registers before doing |
16 |
arithmetic on them. This may produce better code just as -fforce-mem may. |
17 |
|
18 |
Off the bat, I don't see any glaringly obvious security risks, its probably a |
19 |
safe flag; then again, I'm not expert. |
20 |
-- |
21 |
gentoo-hardened@g.o mailing list |