From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:56267) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ebSKO-0000NG-Gf for guix-patches@gnu.org; Tue, 16 Jan 2018 09:35:10 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ebSKL-00056N-SA for guix-patches@gnu.org; Tue, 16 Jan 2018 09:35:04 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:50320) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ebSKL-00055t-O1 for guix-patches@gnu.org; Tue, 16 Jan 2018 09:35:01 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ebSKL-0000zj-Hy for guix-patches@gnu.org; Tue, 16 Jan 2018 09:35:01 -0500 Subject: [bug#30111] gnu: gcc@7: Apply the 'retpoline' mitigation technique. Resent-Message-ID: From: ludo@gnu.org (Ludovic =?UTF-8?Q?Court=C3=A8s?=) References: <877esksi62.fsf@gmail.com> <87d12bgpqh.fsf@gmail.com> <87a7xet06p.fsf@gmail.com> Date: Tue, 16 Jan 2018 15:33:57 +0100 In-Reply-To: <87a7xet06p.fsf@gmail.com> (Alex Vong's message of "Tue, 16 Jan 2018 21:14:54 +0800") Message-ID: <87a7xd6ffu.fsf@gnu.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: Alex Vong Cc: 30111@debbugs.gnu.org Hi Alex, Alex Vong skribis: > From aea3d11f59e260111bdb8bcac458c97a946fa900 Mon Sep 17 00:00:00 2001 > From: Alex Vong > Date: Tue, 16 Jan 2018 20:32:32 +0800 > Subject: [PATCH] gnu: gcc@7: Apply the 'retpoline' mitigation technique. > > This is part of Spectre (branch target injection) [CVE-2017-5715] > mitigation. Suggested by Mark H Weaver . > > * gnu/local.mk (dist_patch_DATA): Add them. > * gnu/packages/gcc.scm (gcc@7): Use them. > * gnu/packages/patches/gcc-retpoline-Change-V-to-bare-reg-names.patch, > gnu/packages/patches/gcc-retpoline-i386-More-use-reference-of-struct-ix86= _frame-to-avoi.patch, > gnu/packages/patches/gcc-retpoline-i386-Move-struct-ix86_frame-to-machine= _function.patch, > gnu/packages/patches/gcc-retpoline-i386-Use-reference-of-struct-ix86_fram= e-to-avoid-cop.patch, > gnu/packages/patches/gcc-retpoline-indirect-thunk-reg-names.patch, > gnu/packages/patches/gcc-retpoline-x86-Add-V-register-operand-modifier.pa= tch, > gnu/packages/patches/gcc-retpoline-x86-Add-mfunction-return.patch, > gnu/packages/patches/gcc-retpoline-x86-Add-mindirect-branch-register.patc= h, > gnu/packages/patches/gcc-retpoline-x86-Add-mindirect-branch.patch, > gnu/packages/patches/gcc-retpoline-x86-Disallow-mindirect-branch-mfunctio= n-return-with-.patch: > New files. I=E2=80=99d suggest removing the test suite changes from the patches (curre= ntly we don=E2=80=99t run GCC=E2=80=99s test suite.) Also, =E2=80=98guix lint= =E2=80=99 may suggest using shorter file names. Do you know if a new 7.x including retpoline support is scheduled for release soon? Thanks, Ludo=E2=80=99.