Re: [PATCH 0/11] crypto: CFI fixes

Eric Biggers
2022-11-18T19:24:21Z

On Fri, Nov 18, 2022 at 07:14:13PM +0000, Elliott, Robert (Servers) wrote:
>
> > arch/x86/crypto/twofish_glue_3way.c:EXPORT_SYMBOL_GPL(__twofish_enc_blk_3w
> > ay);
> >
> > No, that doesn't matter at all. Whether a symbol is exported or not just
> > has to do with how the code is divided into modules. It doesn't have
> > anything to do with indirect calls.
>
> I thought that makes them available to external modules, and there is no
> control over how they use them.
>

The upstream kernel doesn't support out of tree modules. In the highly unlikely
event that someone wants to make these low-level implementation details
available to out of tree modules, they can just patch the kernel themselves.

- Eric