Re: [PATCH v19 1/7] x86/cet/ibt: Update Kconfig for user-mode Indirect Branch Tracking

[Kees Cook]

On Wed, Feb 03, 2021 at 02:58:56PM -0800, Yu-cheng Yu wrote:
> Indirect branch tracking is a hardware security feature that verifies near
> indirect call/jump instructions arrive at intended targets, which are
> labeled by the compiler with ENDBR opcodes.  If such instructions reach
> unlabeled locations, the processor raises control-protection faults.
> 
> Check the compiler is up-to-date at config time.
> 
> Signed-off-by: Yu-cheng Yu <yu-cheng.yu@xxxxxxxxx>

Reviewed-by: Kees Cook <keescook@xxxxxxxxxxxx>

-- 
Kees Cook