Re: [PATCH v4 34/75] x86/head/64: Build k/head64.c with -fno-stack-protector

2020-07-15 Thread Joerg Roedel
On Tue, Jul 14, 2020 at 06:34:24PM -0700, Kees Cook wrote: > On Tue, Jul 14, 2020 at 02:08:36PM +0200, Joerg Roedel wrote: > > +# make sure head64.c is built without stack protector > > +nostackp := $(call cc-option, -fno-stack-protector) > > +CFLAGS_head64.o:= $(nostackp) > > Recent r

Re: [PATCH v4 34/75] x86/head/64: Build k/head64.c with -fno-stack-protector

2020-07-14 Thread Kees Cook
On Tue, Jul 14, 2020 at 02:08:36PM +0200, Joerg Roedel wrote: > From: Joerg Roedel > > The code inserted by the stack protector does not work in the early > boot environment because it uses the GS segment, at least with memory > encryption enabled. Make sure the early code is compiled without thi

[PATCH v4 34/75] x86/head/64: Build k/head64.c with -fno-stack-protector

2020-07-14 Thread Joerg Roedel
From: Joerg Roedel The code inserted by the stack protector does not work in the early boot environment because it uses the GS segment, at least with memory encryption enabled. Make sure the early code is compiled without this feature enabled. Signed-off-by: Joerg Roedel --- arch/x86/kernel/Ma