xen/misc: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 13:02:13 +0000 (14:02 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commit66342fb5de2ffa7f26d5cabb4f7524bdb72be8b7
tree81428c520e3aac3b61295c8b65860cc954add3dd
parent780c89eefa22514b1a91b959bf7828504c6aed31
xen/misc: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
16 files changed:
xen/arch/x86/mm.c
xen/arch/x86/setup.c
xen/common/coverage/gcov.c
xen/common/coverage/llvm.c
xen/common/domain.c
xen/common/gdbstub.c
xen/common/livepatch.c
xen/common/memory.c
xen/common/page_alloc.c
xen/common/radix-tree.c
xen/common/rangeset.c
xen/common/spinlock.c
xen/common/vm_event.c
xen/common/xmalloc_tlsf.c
xen/drivers/passthrough/amd/iommu_init.c
xen/include/xen/domain.h