Shadow call stacks will be available in GCC >= 12, this patch makes the corresponding kernel configuration available when compiling the kernel with the gcc. Note that the implementation in GCC is slightly different from Clang. With SCS enabled, functions will only pop x30 once in the epilogue, like: str x30, [x18], #8 stp x29, x30, [sp, #-16]! ...... - ldp x29, x30, [sp], #16 //clang + ldr x29, [sp], #16 //GCC ldr x30, [x18, #-8]! Link: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=ce09ab17ddd21f73ff2caf6eec3b0ee9b0e1a11e
Showing the changes to include (1 of 3 files). Show all
Unified · Split
| @@ -97,6 +97,10 @@ · 96 unmodified lines | |||
| 97 | #define KASAN_ABI_VERSION 4 | 97 | #define KASAN_ABI_VERSION 4 |
| 98 | #endif | 98 | #endif |
| 99 | 99 | ||
| 100 | #ifdef CONFIG_SHADOW_CALL_STACK | ||
| 101 | #define __noscs __attribute__((__no_sanitize__("shadow-call-stack"))) | ||
| 102 | #endif | ||
| 103 | |||
| 100 | #if __has_attribute(__no_sanitize_address__) | 104 | #if __has_attribute(__no_sanitize_address__) |
| 101 | #define __no_sanitize_address __attribute__((no_sanitize_address)) | 105 | #define __no_sanitize_address __attribute__((no_sanitize_address)) |
| 102 | #else | 106 | #else |