Issue Details

Number

30677

Title

Control-flow application capabilities for `x86_64-linux-gnu` release binaries

Description

When building static binaries for `x86_64-linux-gnu`, one can verify that both Control-flow Enforcement Technology (CET) capabilities--indirect branch tracking (IBT) and shadow stack--are enabled by running the following command: ``` $ readelf -n src/bitcoind | grep feature Properties: x86 feature: IBT, SHSTK ``` However, that is not the case for the Guix binaries: ``` $ readelf -n bin/bitcoind | grep feature Properties: x86 feature used: x86, x87, XMM, YMM, XSAVE ```

URL

https://github.com/bitcoin/bitcoin/issue/30677

Closed by

Notes

Attention of

Kill Factor (1-10)

Save

Back to List