Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add LLVM KCFI support to the Rust compiler #105109

Merged
merged 2 commits into from
Dec 10, 2022
Merged

Add LLVM KCFI support to the Rust compiler #105109

merged 2 commits into from
Dec 10, 2022

Commits on Dec 9, 2022

  1. Add LLVM KCFI support to the Rust compiler 

    This commit adds LLVM Kernel Control Flow Integrity (KCFI) support to
the Rust compiler. It initially provides forward-edge control flow
protection for operating systems kernels for Rust-compiled code only by
aggregating function pointers in groups identified by their return and
parameter types. (See llvm/llvm-project@cff5bef.)

Forward-edge control flow protection for C or C++ and Rust -compiled
code "mixed binaries" (i.e., for when C or C++ and Rust -compiled code
share the same virtual address space) will be provided in later work as
part of this project by identifying C char and integer type uses at the
time types are encoded (see Type metadata in the design document in the
tracking issue rust-lang#89653).

LLVM KCFI can be enabled with -Zsanitizer=kcfi.

Co-authored-by: bjorn3 <17426603+bjorn3@users.noreply.github.com>
    @rcvalle @bjorn3
    rcvalle and bjorn3 committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    65698ae View commit details
    Browse the repository at this point in the history

  2. Add documentation for LLVM KCFI support 

    This commit adds initial documentation for LLVM Kernel Control Flow
Integrity (KCFI) support to the Rust compiler (see rust-lang#105109 and rust-lang#89653).

Co-authored-by: Miguel Ojeda <ojeda@users.noreply.github.com>
    @rcvalle @ojeda
    rcvalle and ojeda committed Dec 9, 2022
    Configuration menu
    Copy the full SHA
    e1741ba View commit details
    Browse the repository at this point in the history