From a2eeea78b567c44cac9544e45a178cd2c8587c1d Mon Sep 17 00:00:00 2001 From: GUO Zihua Date: Fri, 26 Aug 2022 16:25:55 +0800 Subject: [PATCH] rk3568: Enable CFI ohos inclusion category: feature feature: Clang CFI issue: I5P4FB CVE: NA Signed-off-by: GUO Zihua -------------------------------- Enable CFI related configs Change-Id: I256ee1684cf4de36887768163f68414642c07e67 --- linux-5.10/arch/arm64/configs/rk3568_standard_defconfig | 2 ++ 1 file changed, 2 insertions(+) diff --git a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig index 6f3fe39..0ed246b 100644 --- a/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig +++ b/linux-5.10/arch/arm64/configs/rk3568_standard_defconfig @@ -641,6 +641,8 @@ CONFIG_STACKPROTECTOR_STRONG=y CONFIG_LTO=y CONFIG_LTO_CLANG=y CONFIG_LTO_CLANG_THIN=y +CONFIG_CFI_CLANG=y +CONFIG_CFI_CLANG_SHADOW=y CONFIG_HAVE_CONTEXT_TRACKING=y CONFIG_HAVE_VIRT_CPU_ACCOUNTING_GEN=y CONFIG_HAVE_IRQ_TIME_ACCOUNTING=y