xen: CFI hardening for __initcall()
authorAndrew Cooper <andrew.cooper3@citrix.com>
Thu, 28 Oct 2021 09:24:13 +0000 (10:24 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit7629460eeb8487de8a13fefe6b73716cc0cdeafe
treea458b4dbca106d94ef36796b234fc6310a639cbd
parent17f0c6176e16ada6b97ccc7caac4b0b00f8e9032
xen: CFI hardening for __initcall()

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
48 files changed:
xen/arch/x86/acpi/cpu_idle.c
xen/arch/x86/acpi/cpufreq/cpufreq.c
xen/arch/x86/cpu/mcheck/non-fatal.c
xen/arch/x86/cpu/microcode/core.c
xen/arch/x86/cpu/mtrr/main.c
xen/arch/x86/cpu/vpmu.c
xen/arch/x86/domain.c
xen/arch/x86/extable.c
xen/arch/x86/hvm/hvm.c
xen/arch/x86/hvm/irq.c
xen/arch/x86/hvm/mtrr.c
xen/arch/x86/hvm/nestedhvm.c
xen/arch/x86/hvm/quirks.c
xen/arch/x86/include/asm/hvm/save.h
xen/arch/x86/ioport_emulate.c
xen/arch/x86/irq.c
xen/arch/x86/mm/shadow/common.c
xen/arch/x86/msi.c
xen/arch/x86/nmi.c
xen/arch/x86/numa.c
xen/arch/x86/oprofile/nmi_int.c
xen/arch/x86/percpu.c
xen/arch/x86/psr.c
xen/arch/x86/pv/domain.c
xen/arch/x86/shutdown.c
xen/arch/x86/time.c
xen/common/core_parking.c
xen/common/debugtrace.c
xen/common/event_channel.c
xen/common/gdbstub.c
xen/common/grant_table.c
xen/common/kernel.c
xen/common/kexec.c
xen/common/livepatch.c
xen/common/page_alloc.c
xen/common/radix-tree.c
xen/common/random.c
xen/common/sched/cpupool.c
xen/common/spinlock.c
xen/common/stop_machine.c
xen/drivers/cpufreq/cpufreq.c
xen/drivers/cpufreq/cpufreq_misc_governors.c
xen/drivers/cpufreq/cpufreq_ondemand.c
xen/drivers/passthrough/amd/iommu.h
xen/drivers/passthrough/amd/iommu_init.c
xen/drivers/passthrough/pci.c
xen/drivers/passthrough/vtd/iommu.c
xen/drivers/passthrough/x86/hvm.c