x86/nmi: CFI hardening
authorAndrew Cooper <andrew.cooper3@citrix.com>
Fri, 29 Oct 2021 13:05:07 +0000 (14:05 +0100)
committerAndrew Cooper <andrew.cooper3@citrix.com>
Wed, 23 Feb 2022 15:33:43 +0000 (15:33 +0000)
commitb1a7d40f30cde6e5b71ee23de25f9cae9837709e
tree61e7b55915c286ae91cffc13dafff185e7fdd1b5
parent15b66009808ac7c5e66824ccac06be15d4129686
x86/nmi: CFI hardening

Control Flow Integrity schemes use toolchain and optionally hardware support
to help protect against call/jump/return oriented programming attacks.

Use cf_check to annotate function pointer targets for the toolchain.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
xen/arch/x86/alternative.c
xen/arch/x86/cpu/microcode/core.c
xen/arch/x86/crash.c
xen/arch/x86/livepatch.c
xen/arch/x86/oprofile/nmi_int.c
xen/arch/x86/traps.c