[gnutls-devel] GnuTLS | aarch64: Enable GCS (!2038)

Read-only notification of GnuTLS library development activities gnutls-devel at lists.gnutls.org
Tue Nov 4 11:18:05 CET 2025



GUILLAUME GARDET created a merge request: https://gitlab.com/gnutls/gnutls/-/merge_requests/2038

Project:Branches: ggardet/gnutls:master to gnutls/gnutls:master
Author:   GUILLAUME GARDET



When building with GCC15+, binutils 2.44+, glibc 2.41+ and `-mbranch-protection=standard` on (openSUSE Tumbleweed) aarch64, this enables PAC, BTI and GCS (Guarded Control Stack).

For GCS, we need to add some gnu properties when assembler code is used, similarly to what we already did for PAC/BTI.

More details on GCS:
* https://community.arm.com/arm-community-blogs/b/tools-software-ides-blog/posts/gcc-15-continuously-improving#guarded
* https://docs.kernel.org/next/arch/arm64/gcs.html

Please note aarch64 assembler code will need to be regenerated after this patch.


## Checklist
 * [ ] Commits have `Signed-off-by:` with name/author being identical to the commit author
 * [ ] Code modified for feature
 * [ ] Test suite updated with functionality tests
 * [ ] Test suite updated with negative tests
 * [ ] Documentation updated / NEWS entry present (for non-trivial changes)

## Reviewer's checklist:
 * [ ] Any issues marked for closing are addressed
 * [ ] There is a test suite reasonably covering new functionality or modifications
 * [ ] Function naming, parameters, return values, types, etc., are consistent and according to `CONTRIBUTION.md`
 * [ ] This feature/change has adequate documentation added
 * [ ] No obvious mistakes in the code

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/2038
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20251104/811805a4/attachment.html>


More information about the Gnutls-devel mailing list