[PATCH 24/24] Intel CET: Document --enable-cet

H.J. Lu hjl.tools@gmail.com
Mon May 14 19:46:00 GMT 2018


On Mon, May 14, 2018 at 10:44 AM, Florian Weimer <fweimer@redhat.com> wrote:
> On 05/09/2018 11:31 PM, H.J. Lu wrote:
>>
>> +* The GNU C Library can now be compiled with support for Intel CET, AKA
>> +  Intel Control-flow Enforcement Technology.  When the library is built
>> +  with --enable-cet, the resulting glibc is protected with indirect
>> +  branch tracking (IBT) and shadow stack (SHSTK).  This feature is
>> +  currently supported on i386, x86_64 and x32 with GCC 8 and binutils
>> +  2.29 or later.
>
>
> Both texts should say something about compatibility.  AFAIK, an --enable-cet
> glibc supports all existing binaries, but requires CPUs which support long
> NOPs (so AMD Geode is out, for example).
>

Like this?

-- 
H.J.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Intel-CET-Document-enable-cet.patch
Type: text/x-patch
Size: 3427 bytes
Desc: not available
URL: <http://sourceware.org/pipermail/libc-alpha/attachments/20180514/cf553928/attachment.bin>


More information about the Libc-alpha mailing list