On Thu, Mar 11, 2021 at 04:49:12PM -0800, Sami Tolvanen wrote: > To ensure we take the actual address of a function in kernel text, use > __va_function. Otherwise, with CONFIG_CFI_CLANG, the compiler replaces > the address with a pointer to the CFI jump table, which is actually in > the module when compiled with CONFIG_LKDTM=m. > > Signed-off-by: Sami Tolvanen <samitolvanen@xxxxxxxxxx> Acked-by: Kees Cook <keescook@xxxxxxxxxxxx> -- Kees Cook