Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1063515: glibc: Please build with -mbranch-protection=standard on arm64 to enable PAC/BTI support

1 view
Skip to first unread message

Emanuele Rocca

unread,
Feb 9, 2024, 5:40:04 AM2/9/24
to
Source: glibc
Version: 2.37-15
Severity: wishlist
Tags: patch
User: debia...@lists.debian.org
Usertags: arm64
Control: block -1 by 1057469

Hi,

As discussed on the debian-glibc mailing list [1], please consider
building glibc on arm64 with -mbranch-protection=standard to enable
support for the PAC/BTI security features in Debian.

The discussion on the mailing list ended up with an agreement on the
attached patch proposed by Aurelien Jarno which works fine in my tests.

In order to properly support PAC/BTI in Debian we need first GCC to
enable support for the feature, and that has not happened yet. For this
reason I'm marking this bug as blocked-by the relevant issue filed
against gcc-12: #1057469.

[1] https://lists.debian.org/debian-glibc/2023/12/msg00022.html
glibc-pac-bti.diff
0 new messages