Messages in this thread | | | Date | Thu, 4 Feb 2021 11:49:58 -0800 | From | Kees Cook <> | Subject | Re: [PATCH v19 1/7] x86/cet/ibt: Update Kconfig for user-mode Indirect Branch Tracking |
| |
On Wed, Feb 03, 2021 at 02:58:56PM -0800, Yu-cheng Yu wrote: > Indirect branch tracking is a hardware security feature that verifies near > indirect call/jump instructions arrive at intended targets, which are > labeled by the compiler with ENDBR opcodes. If such instructions reach > unlabeled locations, the processor raises control-protection faults. > > Check the compiler is up-to-date at config time. > > Signed-off-by: Yu-cheng Yu <yu-cheng.yu@intel.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
-- Kees Cook
| |