x86/guest: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 18:23:09 +0000 (19:23 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commitba2aec1b7a54284535cb1c093c219e9d4e63a298
tree471b62ee6895b194c23691fe8e7bbb72f79e891b
parent78f14da74c79864d5b1c5b9df3d3f0ac5a28a546
x86/guest: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/guest/hyperv/hyperv.c
xen/arch/x86/guest/xen/xen.c