Skip to content

Disable CET protection in mozjs, until after JIT is ported upstream.

Dimitri Ledkov requested to merge xnox/mozjs:cet-78 into debian/78/master

Disable control-flow protection to prevent accidentally building binaries marked as CET compatible, whilst JIT is not ported to CET.

This allows to build mozjs with jit by default, using toolchain that defaults to CET (i.e. Ubuntu toolchain) and yet generate shared library marked as not supporting CET. This builds safe binaries that will correctly execute.

Eventually, when and if, upstream spidermonkey jit is ported to generate CET compatible JIT code, this argument can be dropped, or switched to =full.

This doesn't require any out of the tree patches and works on debian/ubuntu without a significant maintenance burden. It is mostly a safety precaution flag.

Edited by Dimitri Ledkov

Merge request reports