diff options
| author | Joel Sing <joel@sing.id.au> | 2024-02-21 23:29:12 +1100 |
|---|---|---|
| committer | Joel Sing <joel@sing.id.au> | 2024-03-10 04:13:26 +0000 |
| commit | 1e433915ce684049a6a44fd506f691f448b56c76 (patch) | |
| tree | 41fd541ba1d8d2d71b1a42336cb6a01db14bc56d /doc | |
| parent | 47d4295f924bca6f1852622aabc3d3876a3f06d8 (diff) | |
| download | go-1e433915ce684049a6a44fd506f691f448b56c76.tar.gz go-1e433915ce684049a6a44fd506f691f448b56c76.zip | |
cmd/link,debug/elf: mark Go binaries with no branch target CFI on openbsd
OpenBSD enables Indirect Branch Tracking (IBT) on amd64 and Branch Target
Identification (BTI) on arm64, where hardware permits. Since Go generated
binaries do not currently support IBT or BTI, temporarily mark them with
PT_OPENBSD_NOBTCFI which prevents branch target CFI from being enforced
on execution. This should be removed as soon asn IBT and BTI support are
available.
Fixes #66040
Updates #66054
Change-Id: I91ac05736e6942c54502bef4b8815eb8740d2d5e
Reviewed-on: https://go-review.googlesource.com/c/go/+/568435
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Josh Rickmar <jrick@zettaport.com>
Reviewed-by: Keith Randall <khr@golang.org>
Run-TryBot: Joel Sing <joel@sing.id.au>
Reviewed-by: Keith Randall <khr@google.com>
Reviewed-by: Than McIntosh <thanm@google.com>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/next/6-stdlib/99-minor/debug/elf/66054.md | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/doc/next/6-stdlib/99-minor/debug/elf/66054.md b/doc/next/6-stdlib/99-minor/debug/elf/66054.md new file mode 100644 index 0000000000..9cf1fa7ad1 --- /dev/null +++ b/doc/next/6-stdlib/99-minor/debug/elf/66054.md @@ -0,0 +1,3 @@ +The debug/elf package now defines PT_OPENBSD_NOBTCFI. This elf.ProgType is +used to disable Branch Tracking Control Flow Integrity (BTCFI) enforcement +on OpenBSD binaries. |