Re: [RFC] Circumventing FineIBT Via Entrypoints

[Kees Cook]

On February 25, 2025 1:14:01 PM PST, Andrew Cooper <andrew.cooper3@xxxxxxxxxx> wrote:
>Peter Zijlstra has added a FineIBT=paranoid mode which performs the hash
>check ahead of calling the function pointer, which ought to mitigate
>this but at even higher overhead.

Was kCFI vs FineIBT perf ever measured? Is the assumption of higher overhead based on kCFI filling dcache in addition to icache, whereas FineIBT only fills icache?

-Kees

-- 
Kees Cook