Re: [PATCH v19 7/7] x86/vdso: Insert endbr32/endbr64 to vDSO

On Wed, Feb 03, 2021 at 02:59:02PM -0800, Yu-cheng Yu wrote:

From: "H.J. Lu" <redacted>

When Indirect Branch Tracking (IBT) is enabled, vDSO functions may be
called indirectly, and must have ENDBR32 or ENDBR64 as the first
instruction.  The compiler must support -fcf-protection=branch so that it
can be used to compile vDSO.

Signed-off-by: H.J. Lu <redacted>

Reviewed-by: Kees Cook <redacted>

-- 
Kees Cook