x86/misc: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Thu, 28 Oct 2021 11:31:20 +0000 (12:31 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit07d6c4fa3e329a91767d0230f21da53a4ec84a95
tree55da124de1a4545afe8428ced1889a7cf38b65f1
parent031ea741c27e3534dd8b7eb6283234d0af6a7d3f
x86/misc: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/extable.c
xen/common/efi/boot.c