From f4c81846e07f82551890ea865fe47f40d0957f5a Mon Sep 17 00:00:00 2001 From: Donald Buczek Date: Sun, 11 Feb 2018 00:04:00 +0100 Subject: [PATCH] gcc: Update version from 5.5.0 to 7.3.0 gcc 7.3 supports `-mindirect-branch=thunk-extern` which is used (if available) by the kernel build to mitigate Spectre attacks with a method called retpoline. If `-mindirect-branch=thunk-extern` is not available, the kernel build will not (no longer) emit a warning [1]. The insufficient protection will be visible on the running system root@dose:/sys# cat /sys/devices/system/cpu/vulnerabilities/spectre_v2 Vulnerable: Minimal generic ASM retpoline whereas when the kernel is compiled with gcc 7.3 (`prun gcc-7.3.0-0 ./linux-4.14.18-207.bee`) the output is: root@dose:~# cat /sys/devices/system/cpu/vulnerabilities/spectre_v2 Mitigation: Full generic retpoline 1. Changes GCC 7: https://gcc.gnu.org/gcc-7/changes.html 2. Changes GCC 6: https://gcc.gnu.org/gcc-6/changes.html 1. Porting to GCC 7: https://gcc.gnu.org/gcc-7/porting_to.html 2. Porting to GCC 6: https://gcc.gnu.org/gcc-6/porting_to.html [1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?h=linux-4.14.y&id=198660b7a5dd33b114001023d540c9072603e2a8 --- gcc.be0 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gcc.be0 b/gcc.be0 index 72ca474fe..659ae7d79 100755 --- a/gcc.be0 +++ b/gcc.be0 @@ -1,6 +1,6 @@ #!/bin/env beesh -# BEE_VERSION gcc-5.5.0-1 +# BEE_VERSION gcc-7.3.0-0 SRCURL[0]="https://ftp.gnu.org/gnu/gcc/gcc-${PKGVERSION}/gcc-${PKGVERSION}.tar.xz"