[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH v2 7/7] x86/vpmu: Harden indirect branches
- To: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
- From: Jan Beulich <jbeulich@xxxxxxxx>
- Date: Mon, 14 Feb 2022 14:14:22 +0100
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=mSNiNRPDAp4FbHjWk5BNk2LUmOvr0nLZzbpMWULfGLw=; b=RSYE58E2ag+OB9FnTf6JwU7kwIOt7ykUS2g889Itxea3UvkkXFeiPvYIztv9faDIJsiUDLuqQzBE4HTVJetR2apmLQqsgzF/pRyMjc1x3HOqIB/3JFYd6o0d1qUPkZ6+hm3N7Y59714AC+ruP6/kBA46MwC1idGRLOnIAjgAB0QzNfxaPxVt3XPAZmzF3cLhiTiMem+g5VgE2eDCatKyfsO0grNkn6Ic41397roNTlhIh9sJfXuvSiVPRJFXn3B1/3SVQt46octu8FAMNoBp6OojSeG4Q60K/buoBkQlH0L8E2v1hCRBik9XDCGkkiqbmYxMnFPotuD/4evlJ9cxFw==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=UjoPKIdxdU4wuyPMO4kEKye09SD9iXgaoGtqTahWQ4TKKo27+9EluxNPMvvVSdH06vvlA3Y/ry2LLuze4NqwOVBe9lQxZbUiBULqUhjJNIizR13J9N4m/SejVkGtHO/0NDjevJz1kObMpTkoKRlW2QWMNj3SQ7dog03YOx2nNsjTA+ACbBDmfNOtzTicWC/5el0cTc149PXVYCsWWNiR+3DEsiMCcXBom5syDY0dA5cwmBFYlpCo/TOJACaMTw8YOG2QEdzEgjuBDZ1gnHQLNZZoI/yXkhGd21b++nhNb90+7P0+NwI9svyQFmM1GGiwAEBzQSHn3rBbiCCg9aYfTA==
- Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=suse.com;
- Cc: Roger Pau Monné <roger.pau@xxxxxxxxxx>, Wei Liu <wl@xxxxxxx>, Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxxx>
- Delivery-date: Mon, 14 Feb 2022 13:14:29 +0000
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On 14.02.2022 13:56, Andrew Cooper wrote:
> As all function pointer calls are resoved to direct calls on boot, clobber the
> endbr64 instructions too to make life harder for an attacker which has managed
> to hijack a function pointer.
>
> Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>
|
