diff options
| author | Michael Matloob <matloob@golang.org> | 2024-10-01 15:29:36 -0400 |
|---|---|---|
| committer | Michael Matloob <matloob@golang.org> | 2024-10-02 17:00:52 +0000 |
| commit | 268eaf9acbbef7555db02bd3f15bdad9a47d13fa (patch) | |
| tree | 0c602bcafccd99ab22ea6ac7a0f9ca19b338e75d /src | |
| parent | 8c269479eddb8a620e4f4581a520fdf5a931d648 (diff) | |
| download | go-268eaf9acbbef7555db02bd3f15bdad9a47d13fa.tar.xz | |
cmd/go/internal/security: add -ftls-model to valid compiler flags
Allow -ftls-model to be passed in to a system compiler. It does not
allow arbitrary code execution. See
https://gcc.gnu.org/onlinedocs/gcc/Code-Gen-Options.html#index-ftls-model
for documentation for the -ftls-model flag.
Fixes #69711
Change-Id: I842a96832e6858e62c171401d13baa3391d6d00a
Reviewed-on: https://go-review.googlesource.com/c/go/+/617136
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Ian Lance Taylor <iant@google.com>
Diffstat (limited to 'src')
| -rw-r--r-- | src/cmd/go/internal/work/security.go | 1 | ||||
| -rw-r--r-- | src/cmd/go/internal/work/security_test.go | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/src/cmd/go/internal/work/security.go b/src/cmd/go/internal/work/security.go index 543ab225ab..957fad1b40 100644 --- a/src/cmd/go/internal/work/security.go +++ b/src/cmd/go/internal/work/security.go @@ -91,6 +91,7 @@ var validCompilerFlags = []*lazyregexp.Regexp{ re(`-f(no-)?visibility-inlines-hidden`), re(`-fsanitize=(.+)`), re(`-ftemplate-depth-(.+)`), + re(`-ftls-model=(global-dynamic|local-dynamic|initial-exec|local-exec)`), re(`-fvisibility=(.+)`), re(`-g([^@\-].*)?`), re(`-m32`), diff --git a/src/cmd/go/internal/work/security_test.go b/src/cmd/go/internal/work/security_test.go index 68d287ec2b..2ce7806c42 100644 --- a/src/cmd/go/internal/work/security_test.go +++ b/src/cmd/go/internal/work/security_test.go @@ -47,6 +47,7 @@ var goodCompilerFlags = [][]string{ {"-fstack-xxx"}, {"-fno-stack-xxx"}, {"-fsanitize=hands"}, + {"-ftls-model=local-dynamic"}, {"-g"}, {"-ggdb"}, {"-march=souza"}, |