From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 9CA13C2BB85 for ; Thu, 20 Jun 2024 17:57:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: Content-Type:MIME-Version:References:In-Reply-To:Message-ID:Date:Subject:Cc: To:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=lH0FjWkUa2NvWTCtcK+z1I9epAtrzoNKr6kLos2zCLo=; b=lDQyePnrDqbc13TEcP/VFlvAPK Clx/PiYCg/ht9ceoUl7bpWrLP4dR+Prug2R+dXPKMP1j7EVj3Nt3YiLadFYnigtuaqh1C9Fq5eUgK VCULMRrbVIBUK1oRZCMxP5Ggo7qrHc0XiFXu/ylvkOlva2M0yv/VXm+HS5L7MfvXe51HsZNwVL6gw Df0XC8DnUudO/wLVuUYYDsW4nD7cx8F/n9DrtUUwGfdmWOvVCWjm5PTftopn8ht2K1XlcBdNIGEgd 9nYoKweCm4lPZHbS9dSu4KBYiUVUeci34A/wn5/9k2PPHvoEboyLcmLQdOwsckMoNlMTqBqRVTNIL kh5dMfnA==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.97.1 #2 (Red Hat Linux)) id 1sKM1r-000000069xE-3sz8; Thu, 20 Jun 2024 17:56:59 +0000 Received: from out-170.mta0.migadu.com ([2001:41d0:1004:224b::aa]) by bombadil.infradead.org with esmtps (Exim 4.97.1 #2 (Red Hat Linux)) id 1sKM1o-000000069wY-0CWt for linux-arm-kernel@lists.infradead.org; Thu, 20 Jun 2024 17:56:57 +0000 X-Envelope-To: linux-arm-kernel@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux.dev; s=key1; t=1718906211; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=lH0FjWkUa2NvWTCtcK+z1I9epAtrzoNKr6kLos2zCLo=; b=t5PwznC8Zl8XZnPHBFzzbsydv54dtlIBVsYd79nLKsRtGnSbJtk1JTdIDayOXmDQ4r4K1z WlSvflqF3+smQNYARRAd1epXxCw1iaw2mb38Ke7HMaXYJojMZorODlmdn0cAe1ZiMzvMgw BhMfAhuUIOpWSakM0afhgyjUQh7IJgY= X-Envelope-To: kvm@vger.kernel.org X-Envelope-To: ptosi@google.com X-Envelope-To: kvmarm@lists.linux.dev X-Envelope-To: oliver.upton@linux.dev X-Envelope-To: suzuki.poulose@arm.com X-Envelope-To: vdonnefort@google.com X-Envelope-To: will@kernel.org X-Envelope-To: maz@kernel.org X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. From: Oliver Upton To: linux-arm-kernel@lists.infradead.org, kvm@vger.kernel.org, =?UTF-8?q?Pierre-Cl=C3=A9ment=20Tosi?= , kvmarm@lists.linux.dev Cc: Oliver Upton , Suzuki K Poulose , Vincent Donnefort , Will Deacon , Marc Zyngier Subject: Re: [PATCH v5 0/8] KVM: arm64: Add support for hypervisor kCFI Date: Thu, 20 Jun 2024 17:56:40 +0000 Message-ID: <171890618315.1290599.7143742839497338484.b4-ty@linux.dev> In-Reply-To: <20240610063244.2828978-1-ptosi@google.com> References: <20240610063244.2828978-1-ptosi@google.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit X-Migadu-Flow: FLOW_OUT X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20240620_105656_327603_696A3562 X-CRM114-Status: UNSURE ( 6.87 ) X-CRM114-Notice: Please train this message. X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org On Mon, 10 Jun 2024 07:32:29 +0100, Pierre-Clément Tosi wrote: > CONFIG_CFI_CLANG ("kernel Control Flow Integrity") makes the compiler inject > runtime type checks before any indirect function call. On AArch64, it generates > a BRK instruction to be executed on type mismatch and encodes the indices of the > registers holding the branch target and expected type in the immediate of the > instruction. As a result, a synchronous exception gets triggered on kCFI failure > and the fault handler can retrieve the immediate (and indices) from ESR_ELx. > > [...] Applied to kvmarm/next, thanks! [1/8] KVM: arm64: Fix clobbered ELR in sync abort/SError https://git.kernel.org/kvmarm/kvmarm/c/a8f0655887cc [2/8] KVM: arm64: Fix __pkvm_init_switch_pgd call ABI https://git.kernel.org/kvmarm/kvmarm/c/ea9d7c83d14e [3/8] KVM: arm64: nVHE: Simplify invalid_host_el2_vect https://git.kernel.org/kvmarm/kvmarm/c/6e3b773ed6bc [4/8] KVM: arm64: nVHE: gen-hyprel: Skip R_AARCH64_ABS32 https://git.kernel.org/kvmarm/kvmarm/c/4ab3f9dd561b [5/8] KVM: arm64: VHE: Mark __hyp_call_panic __noreturn https://git.kernel.org/kvmarm/kvmarm/c/3c6eb6487693 [6/8] arm64: Introduce esr_brk_comment, esr_is_cfi_brk https://git.kernel.org/kvmarm/kvmarm/c/7a928b32f1de [7/8] KVM: arm64: Introduce print_nvhe_hyp_panic helper https://git.kernel.org/kvmarm/kvmarm/c/8f3873a39529 [8/8] KVM: arm64: nVHE: Support CONFIG_CFI_CLANG at EL2 https://git.kernel.org/kvmarm/kvmarm/c/eca4ba5b6dff -- Best, Oliver