Re: [RFC PATCH v9 00/27] Control-flow Enforcement: Shadow Stack

From: Kees Cook
Date: Tue Feb 25 2020 - 16:31:32 EST


On Wed, Feb 05, 2020 at 10:19:08AM -0800, Yu-cheng Yu wrote:
> Control-flow Enforcement (CET) is a new Intel processor feature that blocks
> return/jump-oriented programming attacks. Details can be found in "Intel
> 64 and IA-32 Architectures Software Developer's Manual" [1].

At v9, this probably isn't RFC any more. :)

As mentioned in another patch, I'd really like to see some self tests
for this feature. It's relatively complex...

--
Kees Cook