From 6b6f03bc1f193e245f8c40b19609d58d53681506 Mon Sep 17 00:00:00 2001
From: William Douglas <william.douglas@intel.com>
Date: Thu, 22 Feb 2018 18:05:18 +0000
Subject: [PATCH] Enable -mzero-caller-saved-regs

This flag will zero caller-touched register values upon function
return as a security feature.
---
 autospec/specfiles.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/autospec/specfiles.py b/autospec/specfiles.py
index b041207..2be1b0d 100644
--- a/autospec/specfiles.py
+++ b/autospec/specfiles.py
@@ -436,6 +436,7 @@ class Specfile(object):
                 flags.extend(["-Os", "-ffunction-sections", "-fdata-sections", "-fno-semantic-interposition"])
         if config.config_opts['security_sensitive']:
             flags.append("-fstack-protector-strong")
+            flags.append("-mzero-caller-saved-regs")
         if self.need_avx2_flags:
             flags.extend(["-O3", "-march=haswell"])
         if self.need_avx512_flags: