CVSROOT:        /cvs
Module name:    ports
Changes by:     rob...@cvs.openbsd.org  2024/02/12 04:32:23

Modified files:
        devel/llvm/13  : Makefile 
        devel/llvm/13/patches: patch-lld_ELF_Driver_cpp 
        devel/llvm/16  : Makefile 
        devel/llvm/16/patches: patch-lld_ELF_Driver_cpp 
        devel/llvm/17  : Makefile 
        devel/llvm/17/patches: patch-lld_ELF_Driver_cpp 

Log message:
sync with base:

Revert the change that enables retpoline PLTs by default.  While these
provide a mitigation against branch speculation attacks, they also make
IBT control flow integrity less effective.  Our kernel now uses IBPB to
as a mitigation against branch speculation attacks, so we can disable
retpoline PLTs again.

Reply via email to