[gentoo-hardened] Is there interest in gentoo-cfi?

2017-04-08 Thread Hanno Böck
Hi, Control Flow Integrity is a new set of exploit mitigations (strictly speaking, there is not "the CFI", but many variants). LLVM/clang has support for some form of CFI since a while. The rough idea is that it adds additional checks to the code to avoid jumps to code pieces that shouldn't happen

Re: [gentoo-hardened] Is there interest in gentoo-cfi?

2017-04-08 Thread Michael Orlitzky
On 04/08/2017 06:39 AM, Hanno Böck wrote: For now I'm just investigating whether there's interest in this. I could create some docs in the wiki on how to get started. Yeah, sounds like fun. Using ld.gold isn't much of a problem these days, at least in my experience. Clang works for most thin

Re: [gentoo-hardened] Is there interest in gentoo-cfi?

2017-04-08 Thread Sven Vermeulen
On Sat, Apr 08, 2017 at 12:39:28PM +0200, Hanno Böck wrote: > Control Flow Integrity is a new set of exploit mitigations (strictly > speaking, there is not "the CFI", but many variants). LLVM/clang has > support for some form of CFI since a while. The rough idea is that it > adds additional checks