Received: by 2002:a25:d7c1:0:0:0:0:0 with SMTP id o184csp882956ybg; Sat, 26 Oct 2019 09:01:38 -0700 (PDT) X-Google-Smtp-Source: APXvYqxk8pR9you4nOLW1lvNorKs5cjQGngyv8C4djQ3p6xdCp8VIaOjQU5B8visc5T0qImiApns X-Received: by 2002:a05:6402:12d4:: with SMTP id k20mr10367751edx.241.1572105698429; Sat, 26 Oct 2019 09:01:38 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1572105698; cv=none; d=google.com; s=arc-20160816; b=z9dHychS3lGtRS8iQcoQpg27Tj+Dyd+303A7FhiibeS8KwQHoEEsLh/0YD94ZnKd/O PYwoE/Odngp+5ypTbRSNqnHnEwILlg8d9BK+TS5RBcplXgjwcNDbr3EiaA6lRZKxPlGZ S/I3N17cJ4h3MCwQRNHha8HjkdVo4R/cf+eWWo1e7cuRJwYYXj9IvAa+jn4aPafzoIPM wL6Tq7XF895FesDaqIqHM07wks9V/nIWRs3NZJYKlmwd/szwWk64caiGcpSk9zyYL4Pd DcR8zx2SVxbuhD6CPNR/R6PfOPmzLZa4EZZYD22nZ9SNKetHwsk7OEQG85odPp1AUgyF m1+g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :user-agent:references:in-reply-to:date:cc:to:from:subject :message-id; bh=W/+eYvMrE1Ly+gyZM6h6U8GZj2A8On9kfhcEgVevw0M=; b=N+BZYupxQL98iDa4IVDXpykQqTjxdsPnGD4W1T5NvYQDbTXK9N+NvwUFOEOLoIRHpE RiBEXAtSkuMg9hFaQ92wojhBhCCPXocBM4WRhuwfTn5mBJUgy0WneVPwhPskpCw0uMhX Wt1IJ+pKOMAl4q3ps+9Q+DWo7W/5AB+6XoyWi8vH0rxrWSODVMf9pGA/idcnWjToxjgu UZm+pb1nrOZ8Q+/txIwc1JMIxPiyrpb2H7LugG+U2TKGbdTBIg3otYgeejPAjGcCmvAS uPlx6yTCHDcRp/YO9LFiWh5e4WiV60deOul/b380LawII3Lsr7NB4pOj/JXXzl8a7dDm e6Hg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id f3si3955829eda.251.2019.10.26.09.01.15; Sat, 26 Oct 2019 09:01:38 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726259AbfJZP5t (ORCPT + 99 others); Sat, 26 Oct 2019 11:57:49 -0400 Received: from smtprelay0232.hostedemail.com ([216.40.44.232]:60793 "EHLO smtprelay.hostedemail.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1726202AbfJZP5t (ORCPT ); Sat, 26 Oct 2019 11:57:49 -0400 Received: from filter.hostedemail.com (clb03-v110.bra.tucows.net [216.40.38.60]) by smtprelay01.hostedemail.com (Postfix) with ESMTP id C1BD5100E7B40; Sat, 26 Oct 2019 15:57:47 +0000 (UTC) X-Session-Marker: 6A6F6540706572636865732E636F6D X-Spam-Summary: 2,0,0,,d41d8cd98f00b204,joe@perches.com,:::::::::::::::::::::::::::::::::::,RULES_HIT:41:355:379:599:800:973:988:989:1260:1277:1311:1313:1314:1345:1359:1437:1515:1516:1518:1534:1539:1568:1593:1594:1711:1714:1730:1747:1777:1792:1981:2194:2199:2393:2559:2562:2828:2897:3138:3139:3140:3141:3142:3622:3867:4321:5007:6642:6742:7903:8660:10004:10400:10848:11026:11232:11658:11914:12043:12048:12297:12740:12760:12895:13069:13148:13230:13311:13357:13439:13848:14181:14659:14721:14819:15001:21080:21212:21451:21627:30054:30070:30074:30091,0,RBL:47.151.135.224:@perches.com:.lbl8.mailshell.net-62.8.0.100 64.201.201.201,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,MSF:not bulk,SPF:fn,MSBL:0,DNSBL:neutral,Custom_rules:0:0:0,LFtime:27,LUA_SUMMARY:none X-HE-Tag: sound93_43b2453be8601 X-Filterd-Recvd-Size: 2094 Received: from XPS-9350.home (unknown [47.151.135.224]) (Authenticated sender: joe@perches.com) by omf11.hostedemail.com (Postfix) with ESMTPA; Sat, 26 Oct 2019 15:57:45 +0000 (UTC) Message-ID: <2c13c39acb55df5dbb0d40c806bb1d7dc4bde2ae.camel@perches.com> Subject: Re: [PATCH v2 05/17] add support for Clang's Shadow Call Stack (SCS) From: Joe Perches To: samitolvanen@google.com, Will Deacon , Catalin Marinas , Steven Rostedt , Masami Hiramatsu , Ard Biesheuvel Cc: Dave Martin , Kees Cook , Laura Abbott , Mark Rutland , Nick Desaulniers , Jann Horn , Miguel Ojeda , Masahiro Yamada , clang-built-linux@googlegroups.com, kernel-hardening@lists.openwall.com, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org Date: Sat, 26 Oct 2019 08:57:41 -0700 In-Reply-To: <20191024225132.13410-6-samitolvanen@google.com> References: <20191018161033.261971-1-samitolvanen@google.com> <20191024225132.13410-1-samitolvanen@google.com> <20191024225132.13410-6-samitolvanen@google.com> Content-Type: text/plain; charset="ISO-8859-1" User-Agent: Evolution 3.34.1-2 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 2019-10-24 at 15:51 -0700, samitolvanen@google.com wrote: > This change adds generic support for Clang's Shadow Call Stack, > which uses a shadow stack to protect return addresses from being > overwritten by an attacker. Details are available here: [] > diff --git a/include/linux/compiler-clang.h b/include/linux/compiler-clang.h [] > @@ -42,3 +42,9 @@ > * compilers, like ICC. > */ > #define barrier() __asm__ __volatile__("" : : : "memory") > + > +#if __has_feature(shadow_call_stack) > +# define __noscs __attribute__((no_sanitize("shadow-call-stack"))) __no_sanitize__