diff --git a/pipelines/test/compiler-hardening-check.yaml b/pipelines/test/compiler-hardening-check.yaml index b547050edc0..0e82afb3895 100644 --- a/pipelines/test/compiler-hardening-check.yaml +++ b/pipelines/test/compiler-hardening-check.yaml @@ -45,6 +45,11 @@ pipeline: out=$(./hello-disabled 1 || true) [ "$out" = "hello-c" ] + # Compile without bind now + ${{inputs.cc}} -Wl,-z,lazy -v -o hello-lazy hello.c + out=$(./hello-lazy 1 || true) + [ "$out" = "hello-c" ] + arch_skip= # full cfprotection is x86 only for now if [ "${{build.arch}}" = "aarch64" ]; then @@ -54,5 +59,8 @@ pipeline: # Test disabling hardening flags hardening-check --nostackprotector $arch_skip ${{inputs.args}} --color hello-disabled && exit 1 + # Test disabling bindnow + hardening-check --nostackprotector $arch_skip ${{inputs.args}} --color hello-lazy && exit 1 + # Test default build hardening-check --nostackprotector $arch_skip ${{inputs.args}} --color hello-default