Enable Control Flow Integrity for the official Linux Chrome.

build/common.gypi

Index: build/common.gypi
diff --git a/build/common.gypi b/build/common.gypi
index dc57c6cad03ca88801fc5072ec2126d41d211ac9..905116638b554d7c56ee1436b923cde20ab5f42b 100644
--- a/build/common.gypi
+++ b/build/common.gypi
@@ -847,6 +847,13 @@
           'enable_prod_wallet_service%': 1,
         }],
 
+        # Enable Control Flow Integrity for the official Linux Chrome.
+        # This triggers an LTO build that requires LLVM Gold plugin to be
+        # downloaded. See src/tools/clang/scripts/update.sh

[pcc1, 2015/12/08 21:03:01]

FYI, update.sh is no more. (Probably can be addressed in a follow-up or in the
next attempt if needed.)

[krasin, 2015/12/08 21:08:16]

Thanks. I agree and will address in a follow up.

+        ['OS=="linux" and target_arch=="x64" and buildtype=="Official" and branding=="Chrome" and chromeos==0', {
+          'cfi_vptr%': 1,
+        }],
+
         # Enable hotwording on Chrome-branded ChromeOS builds.
         ['branding=="Chrome" and chromeos==1', {
           'enable_hotwording%': 1,