This is the mail archive of the
libc-alpha@sourceware.org
mailing list for the glibc project.
Re: [PATCH 0/4] i386: Finish CET support
- From: Florian Weimer <fweimer at redhat dot com>
- To: "H.J. Lu" <hjl dot tools at gmail dot com>
- Cc: libc-alpha at sourceware dot org
- Date: Thu, 12 Dec 2019 13:46:44 +0100
- Subject: Re: [PATCH 0/4] i386: Finish CET support
- References: <20191210204710.4832-1-hjl.tools@gmail.com>
* H. J. Lu:
> This patch set finishes CET support on i386:
>
> 1. getcontext, setcontext and swapcontext are updated not to preserve
> EAX, ECX and EDX. Since they are caller-saved, caller will reload them
> after getcontext, setcontext and swapcontext calls if needed. The extra
> scratch registers are used to enable CET.
> 2. Add missing _CET_ENDBR to i386 assembly files.
> 3. Enable CET support in i386 ucontext functions.
>
> Tested on i386 CET/non-CET machines.
Has the kernel ABI been finalized?
I wonder if we should add IFUNC resolvers which set a flag, and check
that flag at the start of (some of) these functions, so that they cannot
be used as ROP gadgets in programs that do not reference them.
Thanks,
Florian