Re: [PATCH 16/17] KVM: arm64: Disable CFI for nVHE

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Sami Tolvanen <samitolvanen@xxxxxxxxxx>
Subject: Re: [PATCH 16/17] KVM: arm64: Disable CFI for nVHE
From: Kees Cook <keescook@xxxxxxxxxxxx>
Date: Thu, 11 Mar 2021 18:50:59 -0800
Cc: Nathan Chancellor <nathan@xxxxxxxxxx>, Nick Desaulniers <ndesaulniers@xxxxxxxxxx>, Masahiro Yamada <masahiroy@xxxxxxxxxx>, Will Deacon <will@xxxxxxxxxx>, Jessica Yu <jeyu@xxxxxxxxxx>, Arnd Bergmann <arnd@xxxxxxxx>, Tejun Heo <tj@xxxxxxxxxx>, bpf@xxxxxxxxxxxxxxx, linux-hardening@xxxxxxxxxxxxxxx, linux-arch@xxxxxxxxxxxxxxx, linux-arm-kernel@xxxxxxxxxxxxxxxxxxx, linux-kbuild@xxxxxxxxxxxxxxx, linux-pci@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx
In-reply-to: <20210312004919.669614-17-samitolvanen@google.com>
References: <20210312004919.669614-1-samitolvanen@google.com> <20210312004919.669614-17-samitolvanen@google.com>

On Thu, Mar 11, 2021 at 04:49:18PM -0800, Sami Tolvanen wrote:
> Disable CFI for the nVHE code to avoid address space confusion.
> 
> Signed-off-by: Sami Tolvanen <samitolvanen@xxxxxxxxxx>

Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx>

-- 
Kees Cook

References:
- [PATCH 00/17] Add support for Clang CFI
  - From: Sami Tolvanen
- [PATCH 16/17] KVM: arm64: Disable CFI for nVHE
  - From: Sami Tolvanen

Prev by Date: Re: [PATCH 15/17] arm64: add __nocfi to __apply_alternatives
Next by Date: Re: [PATCH 17/17] arm64: allow CONFIG_CFI_CLANG to be selected
Previous by thread: [PATCH 16/17] KVM: arm64: Disable CFI for nVHE
Next by thread: [PATCH 14/17] arm64: add __nocfi to functions that jump to a physical address
Index(es):
- Date
- Thread

[Index of Archives] [Linux Kernel] [Kernel Newbies] [x86 Platform Driver] [Netdev] [Linux Wireless] [Netfilter] [Bugtraq] [Linux Filesystems] [Yosemite Discussion] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Samba] [Device Mapper]

Powered by Linux