x86/dpci: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 14:47:20 +0000 (15:47 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit47fa059e4e661c541fc407169411f214c9ab9d6f
tree376c575d841fe1a4b2bcf8f34f9d34afac46f04f
parentab340ffdd8851e04103fcdb397331e57e69f32ce
x86/dpci: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/hvm/hvm.c
xen/drivers/passthrough/vtd/x86/hvm.c
xen/drivers/passthrough/x86/hvm.c