Upstream: Add Intel Indirect Branch Tracking support #1659
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1659 +/- ##
==========================================
- Coverage 78.22% 78.21% -0.02%
==========================================
Files 571 571
Lines 95519 95519
Branches 13700 13699 -1
==========================================
- Hits 74721 74708 -13
- Misses 20188 20198 +10
- Partials 610 613 +3 ☔ View full report in Codecov by Sentry. |
This allows operating systems to insist on IBT enforcement as an exploit mitigation mechanism without needing to make an exception for anything using a bundled boringssl, such as chrome, mono, and qtwebengine. Change-Id: Iac28dd3d2af177b89ffde10ae97bce23739feb94 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/60625 Reviewed-by: Adam Langley <agl@google.com> Commit-Queue: Bob Beck <bbe@google.com> Reviewed-by: David Benjamin <davidben@google.com> (cherry picked from commit 9fc1c33e9c21439ce5f87855a6591a9324e569fd)
Change-Id: Ie64ed383a1f6b63a0624c8a6f64d92a33dabf56e Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/61485 Auto-Submit: Bob Beck <bbe@google.com> Commit-Queue: David Benjamin <davidben@google.com> Reviewed-by: David Benjamin <davidben@google.com> (cherry picked from commit 51ed32f1971956a904ce7b3a7ff10716e76eecd4)
justsmth
changed the title
nebeid
approved these changes
Jul 12, 2024
dkostic
approved these changes
Jul 12, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Issues:
Previous Work:
This change re-introduces changes from the following PRs:
Due to build failures with certain environments using gcc-4.8, the above was reverted:
_CET_ENDBR#1656The build failures were addressed in the following PR:
Description of changes:
Upstream commits:
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.