Re: [PATCH v19 1/7] x86/cet/ibt: Update Kconfig for user-mode Indirect Branch Tracking
- From
- Kees Cook <hidden>
- Date
- 2021-02-04 19:51:44
- Also in
- linux-arch, linux-doc, linux-mm, lkml
- Reply to
- Yu-cheng Yu, 2021-02-03
On Wed, Feb 03, 2021 at 02:58:56PM -0800, Yu-cheng Yu wrote:
Indirect branch tracking is a hardware security feature that verifies near indirect call/jump instructions arrive at intended targets, which are labeled by the compiler with ENDBR opcodes. If such instructions reach unlabeled locations, the processor raises control-protection faults. Check the compiler is up-to-date at config time. Signed-off-by: Yu-cheng Yu <redacted>
Reviewed-by: Kees Cook <redacted> -- Kees Cook