CVSROOT: /cvs Module name: ports Changes by: rob...@cvs.openbsd.org 2024/02/12 04:32:23
Modified files: devel/llvm/13 : Makefile devel/llvm/13/patches: patch-lld_ELF_Driver_cpp devel/llvm/16 : Makefile devel/llvm/16/patches: patch-lld_ELF_Driver_cpp devel/llvm/17 : Makefile devel/llvm/17/patches: patch-lld_ELF_Driver_cpp Log message: sync with base: Revert the change that enables retpoline PLTs by default. While these provide a mitigation against branch speculation attacks, they also make IBT control flow integrity less effective. Our kernel now uses IBPB to as a mitigation against branch speculation attacks, so we can disable retpoline PLTs again.