]> xenbits.xensource.com Git - xen.git/commit
x86/mce: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 10:15:03 +0000 (11:15 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commitf716c734e9573da42f8c5c6ce301801bf0eb620e
treed8da64038c10cccfabb67bf9a7310856a4dc8594
parent5b587af6a79062ff086d3df0d5047577edbde424
x86/mce: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/cpu/mcheck/mce.c
xen/arch/x86/cpu/mcheck/mce.h
xen/arch/x86/cpu/mcheck/mce_amd.c
xen/arch/x86/cpu/mcheck/mce_amd.h
xen/arch/x86/cpu/mcheck/mce_intel.c