Re: [PATCH v3] x86/cet: Use dedicated NOP4 for cf_clobber

2022-03-17 Thread Andrew Cooper
On 17/03/2022 14:21, Jan Beulich wrote: > On 17.03.2022 15:06, Andrew Cooper wrote: >> For livepatching, we need to look at a potentially clobbered function and >> determine whether it used to have an ENDBR64 instruction. >> >> Use a non-default 4-byte P6 long nop, not emitted by toolchains, and

Re: [PATCH v3] x86/cet: Use dedicated NOP4 for cf_clobber

2022-03-17 Thread Jan Beulich
On 17.03.2022 15:06, Andrew Cooper wrote: > For livepatching, we need to look at a potentially clobbered function and > determine whether it used to have an ENDBR64 instruction. > > Use a non-default 4-byte P6 long nop, not emitted by toolchains, and extend > check-endbr.sh to look for it. The

[PATCH v3] x86/cet: Use dedicated NOP4 for cf_clobber

2022-03-17 Thread Andrew Cooper
For livepatching, we need to look at a potentially clobbered function and determine whether it used to have an ENDBR64 instruction. Use a non-default 4-byte P6 long nop, not emitted by toolchains, and extend check-endbr.sh to look for it. The same logic can check for the absence of any endbr32