Re: [RFC PATCH v9 00/27] Control-flow Enforcement: Shadow Stack
From: Kees Cook <hidden>
Date: 2020-02-25 21:31:32
Also in:
linux-arch, linux-doc, linux-mm, lkml
On Wed, Feb 05, 2020 at 10:19:08AM -0800, Yu-cheng Yu wrote:
Control-flow Enforcement (CET) is a new Intel processor feature that blocks return/jump-oriented programming attacks. Details can be found in "Intel 64 and IA-32 Architectures Software Developer's Manual" [1].
At v9, this probably isn't RFC any more. :) As mentioned in another patch, I'd really like to see some self tests for this feature. It's relatively complex... -- Kees Cook