scottk/secureblue
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/secureblue.git synced 2025-11-01 19:07:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: request compiler argument changes upstream

Browse Source
This commit is contained in:
qoijjj
2024-02-19 19:56:11 -08:00
committed by GitHub
parent 14402a6526
commit dc9889eeec
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/files/usr/etc/chromium/vanadium_comparison.readme.md
View File

@@ -5,8 +5,8 @@ A list of [Vanadium patches](https://github.com/GrapheneOS/Vanadium/blob/main/pa
| [0001-disable-checkout_nacl](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0001-disable-checkout_nacl.patch) | Disables checking out nacl | Yes | [nacl is completely disabled in upstream Fedora](https://src.fedoraproject.org/rpms/chromium/blob/f39/f/chromium.spec#_1301) |
| [0002-use-64-bit-WebView-processes](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0002-use-64-bit-WebView-processes.patch) | Forbid use of 32-bit ABI in WebView | No, Android only | N/A |
| [0003-switch-to-fstack-protector-strong](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0003-switch-to-fstack-protector-strong.patch) | Use -fstack-protector-strong cflag | Yes | [Set in upstream Fedora already](https://src.fedoraproject.org/rpms/chromium/blob/f39/f/chromium-119-fstack-protector-strong.patch) |
| [0004-enable-fwrapv-in-Clang-for-non-UBSan-builds](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0004-enable-fwrapv-in-Clang-for-non-UBSan-builds.patch) | Set -fwrapv to make signed integer overflow defined behavior to improve memory safety | Yes | MISSING |
| [0005-enable-ftrivial-auto-var-init-zero](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0005-enable-ftrivial-auto-var-init-zero.patch) | Set -ftrivial-auto-var-init=zero to force clang to initialize automatic variables with zeroes | Yes | MISSING |
| [0004-enable-fwrapv-in-Clang-for-non-UBSan-builds](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0004-enable-fwrapv-in-Clang-for-non-UBSan-builds.patch) | Set -fwrapv to make signed integer overflow defined behavior to improve memory safety | Yes | MISSING, https://bugzilla.redhat.com/show_bug.cgi?id=2265039 |
| [0005-enable-ftrivial-auto-var-init-zero](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0005-enable-ftrivial-auto-var-init-zero.patch) | Set -ftrivial-auto-var-init=zero to force clang to initialize automatic variables with zeroes | Yes | MISSING, https://bugzilla.redhat.com/show_bug.cgi?id=2265043 |
| [0006-disable-broken-warning-for-auto-var-init](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0006-disable-broken-warning-for-auto-var-init.patch) | Minor fix related to the prior patch | Yes | MISSING |
| [0007-Vanadium-branding.patch](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0007-Vanadium-branding.patch) | Apply branding changes specific to Vanadium | No, branding related | N/A |
| [0008-Vanadium-branding-for-WebView.patch](https://github.com/GrapheneOS/Vanadium/blob/main/patches/0008-Vanadium-branding-for-WebView.patch) | Apply branding changes specific to Vanadium for the WebView | No, branding related | N/A |