Messages in this thread | | | Date | Wed, 28 Apr 2021 13:38:59 -0700 | From | Kees Cook <> | Subject | Re: [PATCH v26 6/9] x86/vdso: Insert endbr32/endbr64 to vDSO |
| |
On Tue, Apr 27, 2021 at 01:47:17PM -0700, Yu-cheng Yu wrote: > From: "H.J. Lu" <hjl.tools@gmail.com> > > When Indirect Branch Tracking (IBT) is enabled, vDSO functions may be > called indirectly, and must have ENDBR32 or ENDBR64 as the first > instruction. The compiler must support -fcf-protection=branch so that it > can be used to compile vDSO. > > Signed-off-by: H.J. Lu <hjl.tools@gmail.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
-- Kees Cook
| |