1 |
On Jun 19, 2005, at 5:28 PM, Patrick Rutkowski wrote: |
2 |
|
3 |
> On Sunday 19 June 2005 02:53 pm, Simon Strandman wrote: |
4 |
>> I just checked make.defaults for the x86 hardened profile and it has |
5 |
>> CFLAGS="-O2 -mcpu=i386 -pipe -fforce-addr". |
6 |
>> |
7 |
>> Why the -fforce-addr? Does it have any impact on security? |
8 |
>> |
9 |
>> I use hardened on my home server but I don't have -fforce-addr in its |
10 |
>> CFLAGS. Should I add it? |
11 |
>> |
12 |
>> -- |
13 |
>> Simon Strandman <simon.strandman@×××××.com> |
14 |
> The ggc man page stages |
15 |
> |
16 |
> -fforce-addr |
17 |
> Force memory address constants to be copied into registers before |
18 |
> doing |
19 |
> arithmetic on them. This may produce better code just as -fforce-mem |
20 |
> may. |
21 |
|
22 |
Anyone know, better with respect to what? (ie faster instructions, |
23 |
nicer to the cache, "more" correct...) |
24 |
|
25 |
james |
26 |
|
27 |
-- |
28 |
gentoo-hardened@g.o mailing list |