diff options
| author | Alexander Leidinger <Alexander@Leidinger.net> | 2025-01-11 12:48:50 +0000 |
|---|---|---|
| committer | Alexander Leidinger <netchild@FreeBSD.org> | 2025-01-22 18:33:23 +0000 |
| commit | 2a44cccd404d94c273c78e279df3fdc5531d25a2 (patch) | |
| tree | ce250cd1e9c7ef522b5e0334561fd5237f6c241a /tools | |
| parent | 9dcb984251b35ab1959bcaafcb3f129c8ae2f25b (diff) | |
Diffstat (limited to 'tools')
| -rw-r--r-- | tools/build/options/WITHOUT_ZEROREGS | 2 | ||||
| -rw-r--r-- | tools/build/options/WITH_ZEROREGS | 4 |
2 files changed, 6 insertions, 0 deletions
diff --git a/tools/build/options/WITHOUT_ZEROREGS b/tools/build/options/WITHOUT_ZEROREGS new file mode 100644 index 000000000000..edaf5fd8d6c9 --- /dev/null +++ b/tools/build/options/WITHOUT_ZEROREGS @@ -0,0 +1,2 @@ +Do not build build the basesystem with code to zero caller-used register +contents on function return. diff --git a/tools/build/options/WITH_ZEROREGS b/tools/build/options/WITH_ZEROREGS new file mode 100644 index 000000000000..1fc4b856bd50 --- /dev/null +++ b/tools/build/options/WITH_ZEROREGS @@ -0,0 +1,4 @@ +Build the basesystem with code to zero caller-used register contents +on function return. +This prevents leaking temporary values for side channel attacks. +Additionally this reduces the number of usable ROP gadgets for attackers. |