CVSROOT: /cvs
Module name: src
Changes by: dera...@cvs.openbsd.org 2024/06/02 09:42:19
Added files:
gnu/llvm/llvm/lib/Target/X86: X86RetClean.cpp
Log message:
add -fret-clean option (amd64 and i386 only at first), defaulting to off.
This causes the caller to cleans the return address off the stack after
a callq completes. The option is best used in low-level libraries (such as
libc), because libc contains low-level system call stubs. The option
reduces hints (found on the stale parts of the stack) about libc.so's mapping
location, and together with random-relinking, relro got/pic, and xonly
makes some exploit methods more difficult.
ok mortimer, mlarkin, much discussion with kettenis, in snaps for 2 weeks.
