xen: CFI hardening for x86 hypercalls
authorAndrew Cooper <andrew.cooper3@citrix.com>
Thu, 21 Oct 2021 17:38:50 +0000 (18:38 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:42 +0000 (15:33 +0000)
commit517b9114bfddf24ecb8890be79e1d218254dbf18
treecba79816b12cee0402385f755a397e7b61d8a7f8
parent3667f7f8f7c471e94e58cf35a95f09a0fe5c1290
xen: CFI hardening for x86 hypercalls

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
40 files changed:
xen/arch/x86/compat.c
xen/arch/x86/cpu/mcheck/mce.c
xen/arch/x86/cpu/vpmu.c
xen/arch/x86/hvm/dm.c
xen/arch/x86/hvm/hvm.c
xen/arch/x86/hvm/hypercall.c
xen/arch/x86/include/asm/hypercall.h
xen/arch/x86/include/asm/paging.h
xen/arch/x86/mm.c
xen/arch/x86/mm/paging.c
xen/arch/x86/physdev.c
xen/arch/x86/platform_hypercall.c
xen/arch/x86/pv/callback.c
xen/arch/x86/pv/descriptor-tables.c
xen/arch/x86/pv/iret.c
xen/arch/x86/pv/misc-hypercalls.c
xen/arch/x86/pv/shim.c
xen/arch/x86/x86_64/compat/mm.c
xen/common/argo.c
xen/common/compat/domain.c
xen/common/compat/grant_table.c
xen/common/compat/kernel.c
xen/common/compat/memory.c
xen/common/dm.c
xen/common/domain.c
xen/common/domctl.c
xen/common/event_channel.c
xen/common/grant_table.c
xen/common/hypfs.c
xen/common/kernel.c
xen/common/kexec.c
xen/common/memory.c
xen/common/multicall.c
xen/common/sched/compat.c
xen/common/sched/core.c
xen/common/sysctl.c
xen/common/xenoprof.c
xen/drivers/char/console.c
xen/include/xen/hypercall.h
xen/xsm/xsm_core.c