Re: [PATCH v4 00/17] Add support for Clang CFI

2021-03-31 Thread Kees Cook
On Wed, Mar 31, 2021 at 02:27:04PM -0700, Sami Tolvanen wrote: > This series adds support for Clang's Control-Flow Integrity (CFI) > checking. With CFI, the compiler injects a runtime check before each > indirect function call to ensure the target is a valid function with > the correct static

[PATCH v4 00/17] Add support for Clang CFI

2021-03-31 Thread Sami Tolvanen
This series adds support for Clang's Control-Flow Integrity (CFI) checking. With CFI, the compiler injects a runtime check before each indirect function call to ensure the target is a valid function with the correct static type. This restricts possible call targets and makes it more difficult for