x86/shadow: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 14:41:15 +0000 (15:41 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit5ea89176628017620899ce119913eee1c313137f
treea22603ab19a1cd0aeeff14c5daf43e1af6c84f6d
parent82081d6ef72b287d7e41807f50f070e0ebd408fe
x86/shadow: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/mm/shadow/common.c
xen/arch/x86/mm/shadow/hvm.c
xen/arch/x86/mm/shadow/multi.c
xen/arch/x86/mm/shadow/multi.h
xen/arch/x86/mm/shadow/none.c
xen/arch/x86/mm/shadow/private.h
xen/arch/x86/mm/shadow/pv.c