[RFC][PATCH] AArch64: use movz/movk instead of literal pools in start.S

Florian Weimer fw@deneb.enyo.de
Thu Sep 7 11:43:00 GMT 2017


> eXecute-Only Memory (XOM) is a protection mechanism against some ROP
> attacks. XOM sets the code as executable and unreadable, so the
> access to any data, like literal pools, in the code section causes
> the fault with XOM. The compiler can disable literal pools for C
> source files, but not for assembly files, so I use movz/movk instead
> of literal pools in start.S for XOM.

Isn't the main goal of XOM to make it more difficult for the
legitimate device owner to view running machine code?

| Execute-only memory allows you to protect your intellectual property
| by preventing executable code being read by users. For example, you
| can place firmware in execute-only memory and load user code and
| drivers separately. Placing the firmware in execute-only memory
| prevents users from trivially reading the code.

<http://infocenter.arm.com/help/index.jsp?topic=/com.arm.doc.dui0471m/chr1368698326509.html>

I don't think it's in the interests of the GNU projet to support such
a thing.



More information about the Libc-alpha mailing list