[PATCH v4 01/17] riscv: Add --enable-cfi option for controlling cfi features

[Andreas Schwab]

On Mai 25 2026, Jesse Huang wrote:

> diff --git a/manual/install.texi b/manual/install.texi
> index 073cda0530..a9dc56f937 100644
> --- a/manual/install.texi
> +++ b/manual/install.texi
> @@ -185,6 +185,18 @@ non CET enabled shared library in CET enabled application.
>  
>  NOTE: @option{--enable-cet} is only supported on x86_64 and x32.
>  
> +@item --enable-cfi
> +Enable RISC-V Control Flow Integrity Extensions (Zicfilp/Zicfiss) support.
> +When @theglibc{} is built with @option{--enable-cfi}, the resulting
> +library is protected with landing pad and shadow stack@. 
> +This feature is currently supported on RV64 with GCC 15 and binutils 2.45
> +or later. With @option{--enable-cfi}, it is an error to dlopen a non CFI
> +enabled shared library in CFI enabled application.  The restriction can be
> +loosen by setting to permissive mode with the use of the glibc tunables,

   loosened

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."