Re: [PATCH bpf v15 0/5] emit ENDBR/BTI instructions for indirect

patchwork-bot+netdevbpf
2026-04-16T14:10:44Z

Hello:

This series was applied to bpf/bpf.git (master)
by Alexei Starovoitov <ast@kernel.org>:

On Thu, 16 Apr 2026 06:43:36 +0000 you wrote:
> On architectures with CFI protection enabled that require landing pad
> instructions at indirect jump targets, such as x86 with CET/IBT enabled
> and arm64 with BTI enabled, kernel panics when an indirect jump lands on
> a target without landing pad. Therefore, the JIT must emit landing pad
> instructions for indirect jump targets.
>
> The verifier already recognizes which instructions are indirect jump
> targets during the verification phase. So we can store this information
> in env->insn_aux_data and pass it to the JIT as new parameter, allowing
> the JIT to consult env->insn_aux_data to determine which instructions are
> indirect jump targets.
>
> [...]

Here is the summary with links:
- [bpf,v15,1/5] bpf: Move constants blinding out of arch-specific JITs
https://git.kernel.org/bpf/bpf/c/d3e945223e01
- [bpf,v15,2/5] bpf: Pass bpf_verifier_env to JIT
https://git.kernel.org/bpf/bpf/c/d9ef13f72711
- [bpf,v15,3/5] bpf: Add helper to detect indirect jump targets
https://git.kernel.org/bpf/bpf/c/07ae6c130b46
- [bpf,v15,4/5] bpf, x86: Emit ENDBR for indirect jump targets
https://git.kernel.org/bpf/bpf/c/9a0e89dcc9be
- [bpf,v15,5/5] bpf, arm64: Emit BTI for indirect jump target
https://git.kernel.org/bpf/bpf/c/f6606a44bc43

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.