build: enable pointer authentication for branch protection on arm64

jgowdy-godaddy · web-flow · commit 938212f3e74a · 2022-08-12T22:41:26.000Z
PR-URL: #43200 Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Darshan Sen <raisinten@gmail.com>
diff --git a/configure.py b/configure.py
@@ -1208,6 +1208,10 @@ def configure_node(o):
 
   o['variables']['want_separate_host_toolset'] = int(cross_compiling)
 
+  # Enable branch protection for arm64
+  if target_arch == 'arm64':
+    o['cflags']+=['-msign-return-address=all']
+
   if options.node_snapshot_main is not None:
     if options.shared:
       # This should be possible to fix, but we will need to refactor the
