Re: [RFC PATCH v2 06/21] cfi: Switch to -fsanitize=kcfi
From: Kees Cook <hidden>
Date: 2022-05-14 21:46:57
Also in:
linux-hardening, lkml, llvm
On Fri, May 13, 2022 at 01:21:44PM -0700, Sami Tolvanen wrote:
Switch from Clang's original forward-edge control-flow integrity implementation to -fsanitize=kcfi, which is better suited for the kernel, as it doesn't require LTO, doesn't use a jump table that requires altering function references, and won't break cross-module function address equality. Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
Yes please. And just to note it somewhere: landing the KCFI implementation on Clang depends on this series being accepted (i.e. if the arm64 and x86 maintainers are happy with this series, then that'll unblock landing it in Clang (no reason to land something that won't get used.) Reviewed-by: Kees Cook <redacted> -- Kees Cook _______________________________________________ linux-arm-kernel mailing list linux-arm-kernel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/linux-arm-kernel