From 83fd3078ddffd1fd5447e3b7a024215343440395 Mon Sep 17 00:00:00 2001
From: Yohei Yukawa <yukawa@chromium.org>
Date: Wed, 22 Jan 2025 22:37:05 +0900
Subject: [PATCH] Specify `/CETCOMPAT` in Bazel Windows build (#1164)

Win32 x64/x86 executables built with GYP are already declared to be
Intel CET compatible (#835).

With this commit those executables built with Bazel also become Intel
CET compatible.

Closes #1111

PiperOrigin-RevId: 718229248
---
 src/build_defs.bzl | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/build_defs.bzl b/src/build_defs.bzl
index 33706e657..9adfae7ab 100644
--- a/src/build_defs.bzl
+++ b/src/build_defs.bzl
@@ -340,6 +340,11 @@ def mozc_win32_cc_prod_binary(
         "/DEBUG:FULL",
         "/PDBALTPATH:%_PDB%",
     ])
+
+    # '/CETCOMPAT' is available only on x86/x64 architectures.
+    if cpu in ["@platforms//cpu:x86_32", "@platforms//cpu:x86_64"]:
+        modified_linkopts.append("/CETCOMPAT")
+
     mozc_cc_binary(
         name = intermediate_name,
         srcs = srcs,