x86/hvmsave: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 15:30:57 +0000 (16:30 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit5b587af6a79062ff086d3df0d5047577edbde424
tree2aae30173cbcb75b2e203215895051d8ae4a6bea
parentf8840cabc61ad715ac5dc42b1a9f5a8b3cb22814
x86/hvmsave: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
12 files changed:
xen/arch/x86/cpu/mcheck/vmce.c
xen/arch/x86/emul-i8254.c
xen/arch/x86/hvm/hpet.c
xen/arch/x86/hvm/hvm.c
xen/arch/x86/hvm/irq.c
xen/arch/x86/hvm/mtrr.c
xen/arch/x86/hvm/pmtimer.c
xen/arch/x86/hvm/rtc.c
xen/arch/x86/hvm/vioapic.c
xen/arch/x86/hvm/viridian/viridian.c
xen/arch/x86/hvm/vlapic.c
xen/arch/x86/hvm/vpic.c