Pierre Warnier 9763b7e177 shadow-rs: suppress unwind tables in release builds (#143) ...

Since Rust 1.92, panic=abort no longer prevents unwind table emission
on Linux. For setuid-root binaries, unwind tables leak internal binary
layout information (function boundaries, call graph structure).

Add -C force-unwind-tables=no via .cargo/config.toml. This is the only
stable mechanism in Cargo 1.95 (profile-rustflags is still unstable).
Applied to all profiles — harmless in dev builds where debug info
already exposes far more than unwind tables.

Verified with readelf: passwd release binary has zero .eh_frame or
.eh_frame_hdr sections after this change.

Fixes #143. Raised by @oech3.

2026-04-22 09:41:46 +02:00

..

config.toml

shadow-rs: suppress unwind tables in release builds (#143)

2026-04-22 09:41:46 +02:00