Bug#1070654: xfsprogs: Build with PAC/BTI support on arm64

[Emanuele Rocca]

Source: xfsprogs
Version: 6.6.0-1
Severity: normal
Tags: patch
User: debian-...@lists.debian.org
Usertags: pac-bti

Hi,

Pointer Authentication (PAC) and Branch Target Identification (BTI) are
two security features available on arm64. [1]

Please consider building xfsprogs with PAC/BTI support turned on, see
attached patch.

Thanks,
  Emanuele

[1] https://wiki.debian.org/ToolChain/PACBTI


diff -Nru xfsprogs-6.5.0/debian/rules xfsprogs-6.5.0/debian/rules
--- xfsprogs-6.5.0/debian/rules 2023-08-15 21:15:28.000000000 +0200
+++ xfsprogs-6.5.0/debian/rules 2024-02-12 15:51:07.000000000 +0100
@@ -27,6 +27,10 @@
 pkgdi  = DIST_ROOT=`pwd`/$(dirdi); export DIST_ROOT;
 stdenv = @GZIP=-q; export GZIP;
 
+ifeq ($(DEB_TARGET_ARCH),arm64)
+       CFLAGS = -mbranch-protection=standard
+endif
+
 configure_options = \
        --build=$(DEB_BUILD_GNU_TYPE) \
        --with-multiarch=$(DEB_HOST_MULTIARCH) \
@@ -37,7 +41,7 @@
        --enable-lto
 
 options = export DEBUG=-DNDEBUG DISTRIBUTION=debian \
-         INSTALL_USER=root INSTALL_GROUP=root LDFLAGS='$(LDFLAGS)' \
+         INSTALL_USER=root INSTALL_GROUP=root CFLAGS='$(CFLAGS)' 
LDFLAGS='$(LDFLAGS)' \
          LOCAL_CONFIGURE_OPTIONS="$(configure_options) --enable-editline=yes 
--enable-blkid=yes" ;
 diopts  = $(options) \
          export OPTIMIZER=-Os LOCAL_CONFIGURE_OPTIONS="$(configure_options) 
--enable-gettext=no" ;