With the security policy we want to rely on usage of
the -ftrivial-auto-var-init=zero flag to declare
bugs "not a CVE" if they rely on uninitialized stack
variables.

This arg is only supported by  CLang 17 or GCC 12 though,
both of which are beyond our current min versions.

This series bumps both CLang and GCC to enable this.

The GCC bump is technically something we shouldn't do per
our platform support matrix, as the system compiler in our
targetted releases of NetBSD, remains GCC 10.4

This series considers it reasonable to bend the rules
slightly, as NetBSD does have new enough CLang, and also
ships newer GCC as non-system compilers.

Also historically the macOS XCode versions reported by
clang did not appear to align with upstream CLang versions
so we checked versions separately for macOS.

With this set of patches we happen to end up on 17.0 for
both upstream CLang and macOS Clang, and this makes me
wonder if we can rely on aligned versions going forward ?

Latest XCode 26.6 apparently reports clang 21.0.0 which
appears to be a match for a modern llvm release.

Daniel P. Berrangé (5):
  tests/vm: drop redundant ';' at end of each shell command
  meson: simplify clang version checks
  meson: bump min XCode CLang to 17.0
  meson: bump min upstream CLang to 17.0
  meson: bump min GCC to 12.0

 meson.build     | 12 ++++++------
 tests/vm/netbsd | 17 +++++++++++------
 2 files changed, 17 insertions(+), 12 deletions(-)

-- 
2.55.0


Reply via email to