diff options
| author |   Peter Zijlstra <peterz@infradead.org> | 2022-03-08 16:30:56 +0100 |
|---|---|---|
| committer | Peter Zijlstra <peterz@infradead.org> | 2022-03-15 10:32:47 +0100 |
| commit | ed53a0d971926e484d86cce617ec02a7ee85c3fe (patch) | |
| tree | 1423484f3912113c56c0b77fa5b0397113040828 /arch/x86/Makefile | |
| parent | objtool: Find unused ENDBR instructions (diff) | |
| download | wireguard-linux-ed53a0d971926e484d86cce617ec02a7ee85c3fe.tar.xz wireguard-linux-ed53a0d971926e484d86cce617ec02a7ee85c3fe.zip | |
x86/alternative: Use .ibt_endbr_seal to seal indirect calls
Objtool's --ibt option generates .ibt_endbr_seal which lists
superfluous ENDBR instructions. That is those instructions for which
the function is never indirectly called.
Overwrite these ENDBR instructions with a NOP4 such that these
function can never be indirect called, reducing the number of viable
ENDBR targets in the kernel.
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Acked-by: Josh Poimboeuf <jpoimboe@redhat.com>
Link: https://lore.kernel.org/r/20220308154319.822545231@infradead.org
Diffstat (limited to 'arch/x86/Makefile')
0 files changed, 0 insertions, 0 deletions