Re: [PATCH v13 7/8] x86/vdso: Insert endbr32/endbr64 to vDSO

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Andy Lutomirski <luto@xxxxxxxxxx>
Subject: Re: [PATCH v13 7/8] x86/vdso: Insert endbr32/endbr64 to vDSO
From: "Yu, Yu-cheng" <yu-cheng.yu@xxxxxxxxx>
Date: Fri, 25 Sep 2020 09:24:02 -0700
Cc: X86 ML <x86@xxxxxxxxxx>, "H. Peter Anvin" <hpa@xxxxxxxxx>, Thomas Gleixner <tglx@xxxxxxxxxxxxx>, Ingo Molnar <mingo@xxxxxxxxxx>, LKML <linux-kernel@xxxxxxxxxxxxxxx>, "open list:DOCUMENTATION" <linux-doc@xxxxxxxxxxxxxxx>, Linux-MM <linux-mm@xxxxxxxxx>, linux-arch <linux-arch@xxxxxxxxxxxxxxx>, Linux API <linux-api@xxxxxxxxxxxxxxx>, Arnd Bergmann <arnd@xxxxxxxx>, Balbir Singh <bsingharora@xxxxxxxxx>, Borislav Petkov <bp@xxxxxxxxx>, Cyrill Gorcunov <gorcunov@xxxxxxxxx>, Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>, Eugene Syromiatnikov <esyr@xxxxxxxxxx>, Florian Weimer <fweimer@xxxxxxxxxx>, "H.J. Lu" <hjl.tools@xxxxxxxxx>, Jann Horn <jannh@xxxxxxxxxx>, Jonathan Corbet <corbet@xxxxxxx>, Kees Cook <keescook@xxxxxxxxxxxx>, Mike Kravetz <mike.kravetz@xxxxxxxxxx>, Nadav Amit <nadav.amit@xxxxxxxxx>, Oleg Nesterov <oleg@xxxxxxxxxx>, Pavel Machek <pavel@xxxxxx>, Peter Zijlstra <peterz@xxxxxxxxxxxxx>, Randy Dunlap <rdunlap@xxxxxxxxxxxxx>, "Ravi V. Shankar" <ravi.v.shankar@xxxxxxxxx>, Vedvyas Shanbhogue <vedvyas.shanbhogue@xxxxxxxxx>, Dave Martin <Dave.Martin@xxxxxxx>, Weijiang Yang <weijiang.yang@xxxxxxxxx>, Pengfei Xu <pengfei.xu@xxxxxxxxx>
In-reply-to: <CALCETrUyLfbodgH3vWqneFgpJb0DEiqRs-ZikhrhhVUR_13xjQ@mail.gmail.com>
References: <20200925145804.5821-1-yu-cheng.yu@intel.com> <20200925145804.5821-8-yu-cheng.yu@intel.com> <CALCETrUyLfbodgH3vWqneFgpJb0DEiqRs-ZikhrhhVUR_13xjQ@mail.gmail.com>
User-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Thunderbird/68.12.0

On 9/25/2020 9:18 AM, Andy Lutomirski wrote:

On Fri, Sep 25, 2020 at 7:58 AM Yu-cheng Yu <yu-cheng.yu@xxxxxxxxx> wrote:


From: "H.J. Lu" <hjl.tools@xxxxxxxxx>

When Indirect Branch Tracking (IBT) is enabled, vDSO functions may be
called indirectly, and must have ENDBR32 or ENDBR64 as the first
instruction.  The compiler must support -fcf-protection=branch so that it
can be used to compile vDSO.


Acked-by: Andy Lutomirski <luto@xxxxxxxxxx>


Thanks!

Yu-cheng

References:
- [PATCH v13 0/8] Control-flow Enforcement: Indirect Branch Tracking
  - From: Yu-cheng Yu
- [PATCH v13 7/8] x86/vdso: Insert endbr32/endbr64 to vDSO
  - From: Yu-cheng Yu
- Re: [PATCH v13 7/8] x86/vdso: Insert endbr32/endbr64 to vDSO
  - From: Andy Lutomirski

Prev by Date: Re: [PATCH v13 7/8] x86/vdso: Insert endbr32/endbr64 to vDSO
Next by Date: Re: [PATCH v13 8/8] x86/vsyscall/64: Fixup Shadow Stack and Indirect Branch Tracking for vsyscall emulation
Previous by thread: Re: [PATCH v13 7/8] x86/vdso: Insert endbr32/endbr64 to vDSO
Next by thread: [PATCH v13 1/8] x86/cet/ibt: Add Kconfig option for user-mode Indirect Branch Tracking
Index(es):
- Date
- Thread

[Index of Archives] [Linux Kernel] [Kernel Newbies] [x86 Platform Driver] [Netdev] [Linux Wireless] [Netfilter] [Bugtraq] [Linux Filesystems] [Yosemite Discussion] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Samba] [Device Mapper]