xen: CFI hardening for IPIs
authorAndrew Cooper <andrew.cooper3@citrix.com>
Thu, 28 Oct 2021 09:56:53 +0000 (10:56 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit4ea76ad84748b49a46b71c64772531e81dd2fd42
treee1809493ca4bf385da114bf3d591dbfc7edee871
parentd910f5ce7744f992a4a69bbb94d1e85a741962a9
xen: CFI hardening for IPIs

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
32 files changed:
xen/arch/x86/acpi/cpu_idle.c
xen/arch/x86/acpi/cpufreq/cpufreq.c
xen/arch/x86/acpi/cpufreq/powernow.c
xen/arch/x86/acpi/lib.c
xen/arch/x86/cpu/amd.c
xen/arch/x86/cpu/mcheck/amd_nonfatal.c
xen/arch/x86/cpu/mcheck/mce.c
xen/arch/x86/cpu/mcheck/mce_intel.c
xen/arch/x86/cpu/mcheck/non-fatal.c
xen/arch/x86/cpu/microcode/core.c
xen/arch/x86/cpu/mtrr/generic.c
xen/arch/x86/cpu/mtrr/main.c
xen/arch/x86/cpu/mwait-idle.c
xen/arch/x86/cpu/vpmu.c
xen/arch/x86/guest/xen/xen.c
xen/arch/x86/hvm/nestedhvm.c
xen/arch/x86/hvm/vmx/vmcs.c
xen/arch/x86/include/asm/mtrr.h
xen/arch/x86/irq.c
xen/arch/x86/nmi.c
xen/arch/x86/oprofile/nmi_int.c
xen/arch/x86/oprofile/op_model_athlon.c
xen/arch/x86/platform_hypercall.c
xen/arch/x86/psr.c
xen/arch/x86/shutdown.c
xen/arch/x86/smp.c
xen/arch/x86/sysctl.c
xen/arch/x86/time.c
xen/common/cpu.c
xen/common/gdbstub.c
xen/common/keyhandler.c
xen/common/page_alloc.c