[PATCH v8 00/14] Control-flow Enforcement: Branch Tracking, PTRACE

Yu-cheng Yu
2019-08-13T21:04:55Z

The previous version of CET Branch Tracking/PTRACE patches is here:

https://lkml.org/lkml/2019/6/6/1030

Summary of changes from v7:

Change legacy bitmap to a special mapping (patch #14).
Rebase to v5.3-rc4.
Small fixes in response to comments.

H.J. Lu (5):
x86/cet/ibt: Add arch_prctl functions for IBT
x86/vdso: Insert endbr32/endbr64 to vDSO
x86/vdso/32: Add ENDBR32 to __kernel_vsyscall entry point
x86/vsyscall/64: Add ENDBR64 to vsyscall entry points
x86: Discard .note.gnu.property sections

Yu-cheng Yu (9):
x86/cet/ibt: Add Kconfig option for user-mode Indirect Branch Tracking
x86/cet/ibt: User-mode indirect branch tracking support
x86/cet/ibt: Handle signals for end branch
mm/mmap: Add IBT bitmap size to address space limit check
x86/cet/ibt: ELF header parsing for IBT
x86/cet/ibt: Add ENDBR to op-code-map
x86/vsyscall/64: Fixup shadow stack and branch tracking for vsyscall
x86/cet: Add PTRACE interface for CET
Introduce arch_prctl(ARCH_X86_CET_MARK_LEGACY_CODE)

arch/x86/Kconfig | 17 ++
arch/x86/Makefile | 7 +
arch/x86/entry/vdso/Makefile | 12 +-
arch/x86/entry/vdso/vdso-layout.lds.S | 1 +
arch/x86/entry/vdso/vdso32/system_call.S | 3 +
arch/x86/entry/vsyscall/vsyscall_64.c | 29 +++
arch/x86/entry/vsyscall/vsyscall_emu_64.S | 9 +
arch/x86/entry/vsyscall/vsyscall_trace.h | 1 +
arch/x86/include/asm/cet.h | 9 +
arch/x86/include/asm/disabled-features.h | 8 +-
arch/x86/include/asm/fpu/regset.h | 7 +-
arch/x86/include/asm/mmu_context.h | 10 +
arch/x86/include/asm/processor.h | 13 +-
arch/x86/include/uapi/asm/prctl.h | 3 +
arch/x86/kernel/Makefile | 2 +-
arch/x86/kernel/cet.c | 54 +++++
arch/x86/kernel/cet_bitmap.c | 210 ++++++++++++++++++
arch/x86/kernel/cet_prctl.c | 19 ++
arch/x86/kernel/cpu/common.c | 17 ++
arch/x86/kernel/fpu/regset.c | 41 ++++
arch/x86/kernel/process_64.c | 5 +
arch/x86/kernel/ptrace.c | 16 ++
arch/x86/kernel/vmlinux.lds.S | 10 +
arch/x86/lib/x86-opcode-map.txt | 13 +-
include/uapi/linux/elf.h | 1 +
mm/memory.c | 8 +
mm/mmap.c | 19 +-
.../arch/x86/include/asm/disabled-features.h | 8 +-
tools/objtool/arch/x86/lib/x86-opcode-map.txt | 13 +-
29 files changed, 552 insertions(+), 13 deletions(-)
create mode 100644 arch/x86/kernel/cet_bitmap.c

--
2.17.1