Hi Bernhard,

On 2024-08-17 05:49, Bernhard Übelacker wrote:
> If pointer authentication is not part of the arm64 baseline,
> maybe the package isa-support should provide a package
> which rr can depend on, like it does to sse2-support at i386?

Basic pointer authentication instructions are defined in the nop space.
This way one can run an executable built with pauth on a CPU that does
not support it and not worry about SIGILLs.

However, if the compiler knows that it can rely on version 8.3 of the
architecture, it will also use instructions that are not in the nop
space. That is the case with the retaa instruction here.

The reason why you are not seeing this bug in bookworm, is that the
package in bookworm was not built with pointer authentication on.

There may be some upstream work to be done in order to properly address
the issue, but in the meantime I'd suggest turning pointer
authentication off for rr by building it with:

 DEB_BUILD_MAINT_OPTIONS=hardening=-branch 

See https://wiki.debian.org/ToolChain/PACBTI

Reply via email to