CVSROOT: /cvs Module name: src Changes by: [email protected] 2024/02/24 10:00:05
Modified files:
sys/arch/amd64/amd64: cpu.c
Log message:
Explicitly disable MSR_CET_NO_TRACK_EN in MSR_S_CET. If enabled by the
boot-process, we don't want to accidentally allow "notrack" indirect
branches. Linux kernel does the same. Today it is difficult to do the
same for userland, because there is 1 known piece of software using
"notrack" (which needs to be fixed).
ok kettenis
