From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 207D020CCCA; Mon, 25 Aug 2025 15:34:01 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1756136042; cv=none; b=dD301duUV01Zjdb/AG1zVX4hWFVBYISAifI+lDqwf7VfEEPCGL4uNTJV6AVOQBBX4S8TQ4wAhVAIurB+cDvMQiArMlE5VRhHuOH2kQaj2BF1/YrVtaYl3hDzOpJjJcjYn8pEgLfgcyuDPtqnEjzL04iImojBlL+Ui2uhbkr9YpU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1756136042; c=relaxed/simple; bh=3MHuUrJA85kZg9pqQ9ja7UgU1fGiFhs/ppzPxlxFgxQ=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=CXAaOkZ6FXsGuMyyMZ2cfGg50o2fNKzd32dctdO+X9R/dPSKJI2bbu1Eh7wrIg0np3hdwbJ6AOpTm1lt29/hJBTYAtu+bqAbS2zsffQstY6PUZWKqOh0i5boXtsSaLp7C/EILQ5D5inJAGVK9Xo0SxFrDytLkbQIlgbAAXRnetk= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=HudmS/JH; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="HudmS/JH" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 889BDC4CEED; Mon, 25 Aug 2025 15:34:01 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1756136041; bh=3MHuUrJA85kZg9pqQ9ja7UgU1fGiFhs/ppzPxlxFgxQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=HudmS/JHfspDfBCzO62hEaLPbXPLtHOHCdGNnxZGXjNsiP8MMHrCtKMHPb+7rh/rY bb8xttodiZxiBiOqINmw/uL5wi2A0DTgwuxpgB8y1rUwfUMlWzaIlLxmrwL5ctYptR vGmtTUhT9sCFB1yXE22v/wpDLWvSd0GpkKiFL53qBbxTwdYNQEA60aiTPAhXX8LF7K dvhIzCUyFWWG8UqL0WCQ9ntSnq9DneESU3MaGz7Vu/FcJVlv+Kc64/jFLhjAV5i8QW K5YGs60Cvmgt2ECznzT/QPnGw5UInRPZ/Kau51i0RGgXsIRJuJCshQCRu/1S0G0qJQ 2R0a8O/FbHgBQ== Date: Mon, 25 Aug 2025 08:34:00 -0700 From: Kees Cook To: Peter Zijlstra Cc: Sami Tolvanen , David Woodhouse , Linus Walleij , Mark Rutland , Puranjay Mohan , Jonathan Corbet , Nathan Chancellor , x86@kernel.org, linux-doc@vger.kernel.org, linux-kbuild@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-riscv@lists.infradead.org, llvm@lists.linux.dev, linux-hardening@vger.kernel.org Subject: Re: [PATCH 3/5] x86/cfi: Add option for cfi=debug bootparam Message-ID: <202508250833.AB86A99894@keescook> References: <20250825141316.work.967-kees@kernel.org> <20250825142603.1907143-3-kees@kernel.org> Precedence: bulk X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20250825142603.1907143-3-kees@kernel.org> On Mon, Aug 25, 2025 at 07:25:50AM -0700, Kees Cook wrote: > static void __apply_fineibt(s32 *start_retpoline, s32 *end_retpoline, > s32 *start_cfi, s32 *end_cfi, bool builtin) > { > + if (builtin) > + pr_info("CFI: Using standard kCFI\n"); > } Oops, this needs IS_ENABLED(CONFIG_CFI) && ... -- Kees Cook