From: Mark Brown <broonie@kernel.org>
To: Josh Poimboeuf <jpoimboe@redhat.com>
Cc: Nick Desaulniers <ndesaulniers@google.com>,
Julien Thierry <jthierry@redhat.com>,
Ard Biesheuvel <ardb@kernel.org>,
Catalin Marinas <catalin.marinas@arm.com>,
Kees Cook <keescook@chromium.org>,
Linux ARM <linux-arm-kernel@lists.infradead.org>,
linux-efi <linux-efi@vger.kernel.org>,
linux-hardening@vger.kernel.org,
LKML <linux-kernel@vger.kernel.org>,
Mark Rutland <mark.rutland@arm.com>,
Masahiro Yamada <masahiroy@kernel.org>,
Michal Marek <michal.lkml@markovi.net>,
Peter Zijlstra <peterz@infradead.org>,
raphael.gault@arm.com, Will Deacon <will@kernel.org>,
clang-built-linux <clang-built-linux@googlegroups.com>,
Bill Wendling <morbo@google.com>,
swine@google.com, yonghyun@google.com
Subject: Re: [RFC PATCH 12/17] gcc-plugins: objtool: Add plugin to detect switch table on arm64
Date: Wed, 3 Feb 2021 13:04:53 +0000 [thread overview]
Message-ID: <20210203130453.GB4880@sirena.org.uk> (raw)
In-Reply-To: <20210203001414.idjrcrki7wmhndre@treble>
[-- Attachment #1: Type: text/plain, Size: 617 bytes --]
On Tue, Feb 02, 2021 at 06:14:14PM -0600, Josh Poimboeuf wrote:
> On Tue, Feb 02, 2021 at 03:01:22PM -0800, Nick Desaulniers wrote:
> > I wonder if PAC or BTI also make this slightly more complex? PAC at
> > least has implications for unwinders, IIUC.
> What is PAC/BTI?
PAC and BTI are ARM architecture extensions. PAC uses a tag in pointers
to sign and verify them, presenting a barrier to ROP, and when BTI is
active only specific instructions can be branched to. Since PAC
modifies pointers when it is active the unwinder has to undo the tagging
to understand what's being pointed to, that's already there.
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]
WARNING: multiple messages have this Message-ID (diff)
From: Mark Brown <broonie@kernel.org>
To: Josh Poimboeuf <jpoimboe@redhat.com>
Cc: Mark Rutland <mark.rutland@arm.com>,
Bill Wendling <morbo@google.com>,
linux-efi <linux-efi@vger.kernel.org>,
Julien Thierry <jthierry@redhat.com>,
yonghyun@google.com, Peter Zijlstra <peterz@infradead.org>,
Catalin Marinas <catalin.marinas@arm.com>,
Masahiro Yamada <masahiroy@kernel.org>,
Nick Desaulniers <ndesaulniers@google.com>,
LKML <linux-kernel@vger.kernel.org>,
clang-built-linux <clang-built-linux@googlegroups.com>,
raphael.gault@arm.com, Michal Marek <michal.lkml@markovi.net>,
linux-hardening@vger.kernel.org, swine@google.com,
Will Deacon <will@kernel.org>, Ard Biesheuvel <ardb@kernel.org>,
Linux ARM <linux-arm-kernel@lists.infradead.org>,
Kees Cook <keescook@chromium.org>
Subject: Re: [RFC PATCH 12/17] gcc-plugins: objtool: Add plugin to detect switch table on arm64
Date: Wed, 3 Feb 2021 13:04:53 +0000 [thread overview]
Message-ID: <20210203130453.GB4880@sirena.org.uk> (raw)
In-Reply-To: <20210203001414.idjrcrki7wmhndre@treble>
[-- Attachment #1.1: Type: text/plain, Size: 617 bytes --]
On Tue, Feb 02, 2021 at 06:14:14PM -0600, Josh Poimboeuf wrote:
> On Tue, Feb 02, 2021 at 03:01:22PM -0800, Nick Desaulniers wrote:
> > I wonder if PAC or BTI also make this slightly more complex? PAC at
> > least has implications for unwinders, IIUC.
> What is PAC/BTI?
PAC and BTI are ARM architecture extensions. PAC uses a tag in pointers
to sign and verify them, presenting a barrier to ROP, and when BTI is
active only specific instructions can be branched to. Since PAC
modifies pointers when it is active the unwinder has to undo the tagging
to understand what's being pointed to, that's already there.
[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]
[-- Attachment #2: Type: text/plain, Size: 176 bytes --]
_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel
next prev parent reply other threads:[~2021-02-03 13:06 UTC|newest]
Thread overview: 106+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-01-20 17:37 [RFC PATCH 00/17] objtool: add base support for arm64 Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 01/17] tools: Add some generic functions and headers Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 02/17] tools: arm64: Make aarch64 instruction decoder available to tools Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 03/17] tools: bug: Remove duplicate definition Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 04/17] objtool: arm64: Add base definition for arm64 backend Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 05/17] objtool: arm64: Decode add/sub instructions Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 06/17] objtool: arm64: Decode jump and call related instructions Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 07/17] objtool: arm64: Decode other system instructions Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 08/17] objtool: arm64: Decode load/store instructions Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 09/17] objtool: arm64: Decode LDR instructions Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 10/17] objtool: arm64: Accept padding in code sections Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 11/17] efi: libstub: Ignore relocations for .discard sections Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 12/17] gcc-plugins: objtool: Add plugin to detect switch table on arm64 Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-27 22:15 ` Nick Desaulniers
2021-01-27 22:15 ` Nick Desaulniers
2021-01-27 23:26 ` Josh Poimboeuf
2021-01-27 23:26 ` Josh Poimboeuf
2021-01-29 18:10 ` Nick Desaulniers
2021-01-29 18:10 ` Nick Desaulniers
2021-02-01 21:44 ` Josh Poimboeuf
2021-02-01 21:44 ` Josh Poimboeuf
2021-02-01 23:17 ` Nick Desaulniers
2021-02-01 23:17 ` Nick Desaulniers
2021-02-02 0:02 ` Josh Poimboeuf
2021-02-02 0:02 ` Josh Poimboeuf
2021-02-02 14:24 ` David Laight
2021-02-02 14:24 ` David Laight
2021-02-02 22:33 ` Nick Desaulniers
2021-02-02 22:33 ` Nick Desaulniers
2021-02-02 23:36 ` Josh Poimboeuf
2021-02-02 23:36 ` Josh Poimboeuf
2021-02-02 23:52 ` Nick Desaulniers
2021-02-02 23:52 ` Nick Desaulniers
2021-02-02 8:57 ` Julien Thierry
2021-02-02 8:57 ` Julien Thierry
2021-02-02 23:01 ` Nick Desaulniers
2021-02-02 23:01 ` Nick Desaulniers
2021-02-03 0:14 ` Josh Poimboeuf
2021-02-03 0:14 ` Josh Poimboeuf
2021-02-03 11:57 ` Peter Zijlstra
2021-02-03 11:57 ` Peter Zijlstra
2021-02-03 13:04 ` Mark Brown [this message]
2021-02-03 13:04 ` Mark Brown
2021-02-03 13:58 ` Mark Rutland
2021-02-03 13:58 ` Mark Rutland
2021-02-03 8:11 ` Julien Thierry
2021-02-03 8:11 ` Julien Thierry
2021-02-09 16:30 ` Daniel Kiss
2021-02-09 16:30 ` Daniel Kiss
2021-01-20 17:37 ` [RFC PATCH 13/17] objtool: arm64: Implement functions to add switch tables alternatives Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 14/17] objtool: arm64: Cache section with switch table information Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 15/17] objtool: arm64: Handle supported relocations in alternatives Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:37 ` [RFC PATCH 16/17] objtool: arm64: Ignore replacement section for alternative callback Julien Thierry
2021-01-20 17:37 ` Julien Thierry
2021-01-20 17:38 ` [RFC PATCH 17/17] objtool: arm64: Enable stack validation for arm64 Julien Thierry
2021-01-20 17:38 ` Julien Thierry
2021-01-21 5:39 ` kernel test robot
2021-01-21 9:03 ` [RFC PATCH 00/17] objtool: add base support " Ard Biesheuvel
2021-01-21 9:03 ` Ard Biesheuvel
2021-01-21 10:26 ` Julien Thierry
2021-01-21 10:26 ` Julien Thierry
2021-01-21 11:08 ` Ard Biesheuvel
2021-01-21 11:08 ` Ard Biesheuvel
2021-01-21 11:23 ` Peter Zijlstra
2021-01-21 11:23 ` Peter Zijlstra
2021-01-21 11:48 ` Ard Biesheuvel
2021-01-21 11:48 ` Ard Biesheuvel
2021-01-21 18:54 ` Josh Poimboeuf
2021-01-21 18:54 ` Josh Poimboeuf
2021-01-22 17:43 ` Mark Brown
2021-01-22 17:43 ` Mark Brown
2021-01-22 17:54 ` Ard Biesheuvel
2021-01-22 17:54 ` Ard Biesheuvel
2021-01-28 22:10 ` Madhavan T. Venkataraman
2021-01-28 22:10 ` Madhavan T. Venkataraman
2021-01-29 15:47 ` Mark Brown
2021-01-22 21:15 ` Madhavan T. Venkataraman
2021-01-22 21:15 ` Madhavan T. Venkataraman
2021-01-22 21:43 ` Ard Biesheuvel
2021-01-22 21:43 ` Ard Biesheuvel
2021-01-22 21:44 ` Madhavan T. Venkataraman
2021-01-22 21:44 ` Madhavan T. Venkataraman
2021-01-25 21:19 ` Josh Poimboeuf
2021-01-25 21:19 ` Josh Poimboeuf
2021-01-22 21:16 ` Madhavan T. Venkataraman
2021-01-22 21:16 ` Madhavan T. Venkataraman
2021-01-21 13:23 ` Julien Thierry
2021-01-21 13:23 ` Julien Thierry
2021-01-21 14:23 ` Mark Brown
2021-01-21 14:23 ` Mark Brown
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210203130453.GB4880@sirena.org.uk \
--to=broonie@kernel.org \
--cc=ardb@kernel.org \
--cc=catalin.marinas@arm.com \
--cc=clang-built-linux@googlegroups.com \
--cc=jpoimboe@redhat.com \
--cc=jthierry@redhat.com \
--cc=keescook@chromium.org \
--cc=linux-arm-kernel@lists.infradead.org \
--cc=linux-efi@vger.kernel.org \
--cc=linux-hardening@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=mark.rutland@arm.com \
--cc=masahiroy@kernel.org \
--cc=michal.lkml@markovi.net \
--cc=morbo@google.com \
--cc=ndesaulniers@google.com \
--cc=peterz@infradead.org \
--cc=raphael.gault@arm.com \
--cc=swine@google.com \
--cc=will@kernel.org \
--cc=yonghyun@google.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.