All of lore.kernel.org
 help / color / mirror / Atom feed
From: Linus Walleij <linus.walleij@linaro.org>
To: Russell King <linux@armlinux.org.uk>,
	 Sami Tolvanen <samitolvanen@google.com>,
	Kees Cook <keescook@chromium.org>,
	 Nathan Chancellor <nathan@kernel.org>,
	 Nick Desaulniers <ndesaulniers@google.com>,
	 Ard Biesheuvel <ardb@kernel.org>, Arnd Bergmann <arnd@arndb.de>
Cc: linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev,
	 Linus Walleij <linus.walleij@linaro.org>
Subject: [PATCH v6 11/11] ARM: Support CLANG CFI
Date: Wed, 17 Apr 2024 10:31:00 +0200	[thread overview]
Message-ID: <20240417-arm32-cfi-v6-11-6486385eb136@linaro.org> (raw)
In-Reply-To: <20240417-arm32-cfi-v6-0-6486385eb136@linaro.org>

Support Control Flow Integrity (CFI) when compiling with
CLANG.

In the as-of-writing LLVM CLANG implementation (v17)
the 32-bit ARM platform is supported by the generic CFI
implementation, which isn't tailored specifically for ARM32
but works well enough to enable the feature.

Tested-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
---
 arch/arm/Kconfig | 1 +
 1 file changed, 1 insertion(+)

diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig
index b14aed3a17ab..df7bd07ad0d4 100644
--- a/arch/arm/Kconfig
+++ b/arch/arm/Kconfig
@@ -35,6 +35,7 @@ config ARM
 	select ARCH_OPTIONAL_KERNEL_RWX if ARCH_HAS_STRICT_KERNEL_RWX
 	select ARCH_OPTIONAL_KERNEL_RWX_DEFAULT if CPU_V7
 	select ARCH_SUPPORTS_ATOMIC_RMW
+	select ARCH_SUPPORTS_CFI_CLANG
 	select ARCH_SUPPORTS_HUGETLBFS if ARM_LPAE
 	select ARCH_SUPPORTS_PER_VMA_LOCK
 	select ARCH_USE_BUILTIN_BSWAP

-- 
2.44.0


WARNING: multiple messages have this Message-ID (diff)
From: Linus Walleij <linus.walleij@linaro.org>
To: Russell King <linux@armlinux.org.uk>,
	 Sami Tolvanen <samitolvanen@google.com>,
	Kees Cook <keescook@chromium.org>,
	 Nathan Chancellor <nathan@kernel.org>,
	 Nick Desaulniers <ndesaulniers@google.com>,
	 Ard Biesheuvel <ardb@kernel.org>, Arnd Bergmann <arnd@arndb.de>
Cc: linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev,
	 Linus Walleij <linus.walleij@linaro.org>
Subject: [PATCH v6 11/11] ARM: Support CLANG CFI
Date: Wed, 17 Apr 2024 10:31:00 +0200	[thread overview]
Message-ID: <20240417-arm32-cfi-v6-11-6486385eb136@linaro.org> (raw)
In-Reply-To: <20240417-arm32-cfi-v6-0-6486385eb136@linaro.org>

Support Control Flow Integrity (CFI) when compiling with
CLANG.

In the as-of-writing LLVM CLANG implementation (v17)
the 32-bit ARM platform is supported by the generic CFI
implementation, which isn't tailored specifically for ARM32
but works well enough to enable the feature.

Tested-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Linus Walleij <linus.walleij@linaro.org>
---
 arch/arm/Kconfig | 1 +
 1 file changed, 1 insertion(+)

diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig
index b14aed3a17ab..df7bd07ad0d4 100644
--- a/arch/arm/Kconfig
+++ b/arch/arm/Kconfig
@@ -35,6 +35,7 @@ config ARM
 	select ARCH_OPTIONAL_KERNEL_RWX if ARCH_HAS_STRICT_KERNEL_RWX
 	select ARCH_OPTIONAL_KERNEL_RWX_DEFAULT if CPU_V7
 	select ARCH_SUPPORTS_ATOMIC_RMW
+	select ARCH_SUPPORTS_CFI_CLANG
 	select ARCH_SUPPORTS_HUGETLBFS if ARM_LPAE
 	select ARCH_SUPPORTS_PER_VMA_LOCK
 	select ARCH_USE_BUILTIN_BSWAP

-- 
2.44.0


_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel

  parent reply	other threads:[~2024-04-17  8:31 UTC|newest]

Thread overview: 29+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-04-17  8:30 [PATCH v6 00/11] CFI for ARM32 using LLVM Linus Walleij
2024-04-17  8:30 ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 01/11] ARM: bugs: Check in the vtable instead of defined aliases Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 02/11] ARM: ftrace: Define ftrace_stub_graph Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 03/11] ARM: mm: Make tlbflush routines CFI safe Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 04/11] ARM: mm: Type-annotate all cache assembly routines Linus Walleij
2024-04-17  8:30 ` [PATCH v6 05/11] ARM: mm: Use symbol alias for two cache functions Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 06/11] ARM: mm: Rewrite cacheflush vtables in CFI safe C Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 07/11] ARM: mm: Type-annotate all per-processor assembly routines Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 08/11] ARM: mm: Define prototypes for all per-processor calls Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 09/11] ARM: lib: Annotate loop delay instructions for CFI Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-17  8:30 ` [PATCH v6 10/11] ARM: hw_breakpoint: Handle CFI breakpoints Linus Walleij
2024-04-17  8:30   ` Linus Walleij
2024-04-18 16:12   ` Sami Tolvanen
2024-04-18 16:12     ` Sami Tolvanen
2024-04-19 12:56     ` Linus Walleij
2024-04-19 12:56       ` Linus Walleij
2024-04-19 21:25       ` Sami Tolvanen
2024-04-19 21:25         ` Sami Tolvanen
2024-04-17  8:31 ` Linus Walleij [this message]
2024-04-17  8:31   ` [PATCH v6 11/11] ARM: Support CLANG CFI Linus Walleij

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20240417-arm32-cfi-v6-11-6486385eb136@linaro.org \
    --to=linus.walleij@linaro.org \
    --cc=ardb@kernel.org \
    --cc=arnd@arndb.de \
    --cc=keescook@chromium.org \
    --cc=linux-arm-kernel@lists.infradead.org \
    --cc=linux@armlinux.org.uk \
    --cc=llvm@lists.linux.dev \
    --cc=nathan@kernel.org \
    --cc=ndesaulniers@google.com \
    --cc=samitolvanen@google.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.