xen: CFI hardening for acpi_table_parse()
authorAndrew Cooper <andrew.cooper3@citrix.com>
Thu, 28 Oct 2021 10:30:00 +0000 (11:30 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit56773dfd5d89a0291249694974d26c624c14421e
tree824be33b15d12b935ba73be076657d3ceff32bf6
parent22939d3c83da3f94c612b1f49f6f91f11ee3490d
xen: CFI hardening for acpi_table_parse()

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
13 files changed:
xen/arch/x86/acpi/boot.c
xen/arch/x86/hvm/dom0_build.c
xen/arch/x86/include/asm/tboot.h
xen/arch/x86/srat.c
xen/arch/x86/tboot.c
xen/arch/x86/x86_64/acpi_mmcfg.c
xen/arch/x86/x86_64/mmconfig.h
xen/drivers/acpi/apei/hest.c
xen/drivers/acpi/numa.c
xen/drivers/passthrough/amd/iommu_acpi.c
xen/drivers/passthrough/pci.c
xen/drivers/passthrough/vtd/dmar.c
xen/include/xen/acpi.h