compiler-hardening-check: Clarify test for -fhardened (#38582)

It took me a little bit to understand this logic during code review - hoping this helps the next person. Signed-off-by: dann frazier <[email protected]>
wolfi-dev · Jan 13, 2025 · 6d98d06 · 6d98d06
1 parent 3de7623
commit 6d98d06
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pipelines/test/compiler-hardening-check.yaml b/pipelines/test/compiler-hardening-check.yaml
@@ -45,7 +45,8 @@ pipeline:
       out=$(./hello-disabled 1 || true)
       [ "$out" = "hello-c" ]
 
-      # Compile without bind now (gcc 14+ specific test)
+      # Compile without bind now. Test for -fhardened support (introduced in
+      # gcc 14), and no-op the test if unsupported.
       GCC_SPEC_FILE=/dev/null ${{inputs.cc}} -fhardened -Wl,-z,lazy -v -o hello-lazy hello.c || cp hello-disabled hello-lazy
       out=$(./hello-lazy 1 || true)
       [ "$out" = "hello-c" ]