diff --git a/CMakeLists.txt b/CMakeLists.txt index c1a6b4c..f05f306 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -389,21 +389,18 @@ if(CMAKE_SOURCE_DIR STREQUAL CMAKE_CURRENT_SOURCE_DIR AND BUILD_TESTING) COMMAND ${HARDENING_CHECK} --help OUTPUT_VARIABLE hardening_check_help ERROR_VARIABLE hardening_check_help - OUTPUT_STRIP_TRAILING_WHITESPACE ERROR_STRIP_TRAILING_WHITESPACE - RESULT_VARIABLE hardening_check_help_result) + OUTPUT_STRIP_TRAILING_WHITESPACE ERROR_STRIP_TRAILING_WHITESPACE) set(hardening_check_arch_flags "") - if(hardening_check_help_result EQUAL 0) - # Control flow integrity (CET) is x86-only and branch protection - # (PAC/BTI) is arm64-only, so ignore whichever doesn't apply. - if(CMAKE_SYSTEM_PROCESSOR STREQUAL aarch64 OR CMAKE_SYSTEM_PROCESSOR - STREQUAL arm64) - if(hardening_check_help MATCHES "nocfprotection") - list(APPEND hardening_check_arch_flags --nocfprotection) - endif() - else() - if(hardening_check_help MATCHES "nobranchprotection") - list(APPEND hardening_check_arch_flags --nobranchprotection) - endif() + # Control flow integrity (CET) is x86-only and branch protection (PAC/BTI) + # is arm64-only, so ignore whichever doesn't apply. + if(CMAKE_SYSTEM_PROCESSOR STREQUAL aarch64 OR CMAKE_SYSTEM_PROCESSOR + STREQUAL arm64) + if(hardening_check_help MATCHES "nocfprotection") + list(APPEND hardening_check_arch_flags --nocfprotection) + endif() + else() + if(hardening_check_help MATCHES "nobranchprotection") + list(APPEND hardening_check_arch_flags --nobranchprotection) endif() endif() add_test(