summaryrefslogtreecommitdiff
path: root/Makefile
diff options
context:
space:
mode:
authorDouglas Raillard <douglas.raillard@arm.com>2017-01-16 11:32:28 +0000
committerDouglas Raillard <douglas.raillard@arm.com>2017-01-30 13:42:26 +0000
commite507f8e7fe24f97e95bc49fff56b1ac32a39a3ac (patch)
tree2fe353b08626a56e4ca76ffa9cb3d6b350b11702 /Makefile
parentd7aa7b44d6c73f84a8913b010e850e0322063d91 (diff)
Add -fno-builtin to CFLAGS
Disable the automatic substitution of functions with builtins. The existing -ffreestanding option should already do this but explicitly adding -fno-builtin reduces the risk of compiler variation. With this option, GCC is not supposed to be able to make assumptions on what the function does, which could otherwise lead to security-sensitive code removal. This can lead to potentially less efficient code but improves predictability of what code is actually compiled into the binary. Change-Id: I06ad151c61318bd1b00d84976f051d2d94314acc Signed-off-by: Douglas Raillard <douglas.raillard@arm.com>
Diffstat (limited to 'Makefile')
-rw-r--r--Makefile2
1 files changed, 1 insertions, 1 deletions
diff --git a/Makefile b/Makefile
index e9a07840..f3f046f4 100644
--- a/Makefile
+++ b/Makefile
@@ -149,7 +149,7 @@ ASFLAGS += $(CPPFLAGS) $(ASFLAGS_$(ARCH)) \
-D__ASSEMBLY__ -ffreestanding \
-Wa,--fatal-warnings
TF_CFLAGS += $(CPPFLAGS) $(TF_CFLAGS_$(ARCH)) \
- -ffreestanding -Wall -std=c99 -Os \
+ -ffreestanding -fno-builtin -Wall -std=c99 -Os \
-ffunction-sections -fdata-sections
LDFLAGS += --fatal-warnings -O1