Re: [PATCH v10 00/26] Control-flow Enforcement: Shadow Stack

From: Josh Poimboeuf
Date: Thu May 21 2020 - 11:16:31 EST


On Wed, Apr 29, 2020 at 03:07:06PM -0700, Yu-cheng Yu wrote:
> Control-flow Enforcement (CET) is a new Intel processor feature that blocks
> return/jump-oriented programming attacks. Details can be found in "Intel
> 64 and IA-32 Architectures Software Developer's Manual" [1].
>
> This series depends on the XSAVES supervisor state series that was split
> out and submitted earlier [2].
>
> I have gone through previous comments, and hope all concerns have been
> resolved now. Please inform me if anything is overlooked.
>
> Changes in v10:

Hi Yu-cheng,

Do you have a git branch with the latest Shadow Stack and IBT branches
applied? I tried to apply IBT v9 on top of this, but I guess the SS
code has changed since then and it didn't apply cleanly.

--
Josh