On Mon, Mar 11, 2019 at 1:36 PM Kees Cook <keesc...@chromium.org> wrote: > > Oh! I see what you mean -- separate the or and test.
Yeah. You'll obviously need to or in the bits at run-time then if the test ever _fails_ and you warn about an attack and do the fixup, but that's a separate path. Linus