CVSROOT: /cvs Module name: src Changes by: [email protected] 2024/02/12 03:46:10
Modified files:
gnu/llvm/lld/ELF: Driver.cpp
Log message:
Revert the change that enables retpoline PLTs by default. While these
provide a mitigation against branch speculation attacks, they also make
IBT control flow integrity less effective. Our kernel now uses IBPB to
as a mitigation against branch speculation attacks, so we can disable
retpoline PLTs again.
ok deraadt@
