[PATCH 2/2] arm64: pauth: don't sign leaf functions

Mark Rutland mark.rutland at arm.com
Thu Jan 26 03:00:48 PST 2023


On Thu, Jan 26, 2023 at 09:40:33AM +0100, Ard Biesheuvel wrote:
> On Wed, 25 Jan 2023 at 19:22, Mark Rutland <mark.rutland at arm.com> wrote:
> > We've used pointer authentication in leave functions since the
> 
> leaf

Thanks; fixed locally.

[...]

> > So generally, trying to use AUTIASP to detect such gadgetization is not
> > robust, and this is dealt with far better by forward-edge CFI (which is
> > designed to prevent such cases). We should bite the buller and stop
> 
> bullet

Thanks; fixed locally.

> > pretending that AUTIASP is a mitigation for such forward-edge
> > gadgetisation.
> >
> 
> Nit: this has an 's' whereas the previous occurrence had a 'z'

Thanks; I've made those both use 'z'.

[...]

> > Signed-off-by: Mark Rutland <mark.rutland at arm.com>
> > Cc: Amit Daniel Kachhap <amit.kachhap at arm.com>
> > Cc: Ard Biesheuvel <ardb at kernel.org>
> > Cc: Catalin Marinas <catalin.marinas at arm.com>
> > Cc: Mark Brown <broonie at kernel.org>
> > Cc: Will Deacon <will at kernel.org>
> 
> Reviewed-by: Ard Biesheuvel <ardb at kernel.org>

Thanks!

Mark.



More information about the linux-arm-kernel mailing list