[PATCH v2 0/6] riscv: KCFI support
patchwork-bot+linux-riscv at kernel.org
patchwork-bot+linux-riscv at kernel.org
Wed Aug 30 06:20:34 PDT 2023
Hello:
This series was applied to riscv/linux.git (for-next)
by Palmer Dabbelt <palmer at rivosinc.com>:
On Mon, 10 Jul 2023 18:35:45 +0000 you wrote:
> This series adds KCFI support for RISC-V. KCFI is a fine-grained
> forward-edge control-flow integrity scheme supported in Clang >=16,
> which ensures indirect calls in instrumented code can only branch to
> functions whose type matches the function pointer type, thus making
> code reuse attacks more difficult.
>
> Patch 1 implements a pt_regs based syscall wrapper to address
> function pointer type mismatches in syscall handling. Patches 2 and 3
> annotate indirectly called assembly functions with CFI types. Patch 4
> implements error handling for indirect call checks. Patch 5 disables
> CFI for arch/riscv/purgatory. Patch 6 finally allows CONFIG_CFI_CLANG
> to be enabled for RISC-V.
>
> [...]
Here is the summary with links:
- [v2,1/6] riscv: Implement syscall wrappers
https://git.kernel.org/riscv/c/08d0ce30e0e4
- [v2,2/6] riscv: Add types to indirectly called assembly functions
https://git.kernel.org/riscv/c/5f59c6855bad
- [v2,3/6] riscv: Add ftrace_stub_graph
https://git.kernel.org/riscv/c/f3a0c23f2539
- [v2,4/6] riscv: Add CFI error handling
https://git.kernel.org/riscv/c/af0ead42f693
- [v2,5/6] riscv/purgatory: Disable CFI
https://git.kernel.org/riscv/c/a72ab0361110
- [v2,6/6] riscv: Allow CONFIG_CFI_CLANG to be selected
https://git.kernel.org/riscv/c/74f8fc31feb4
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
More information about the linux-riscv
mailing list