2c351bb70a
This change adds the CONFIG_CFI_CLANG option, CFI error handling, and a faster look-up table for cross module CFI checks. Bug: 145210207 Change-Id: I68d620ca548a911e2f49ba801bc0531406e679a3 Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
42 lines
1.1 KiB
C
42 lines
1.1 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/*
|
|
* Clang Control Flow Integrity (CFI) support.
|
|
*
|
|
* Copyright (C) 2019 Google LLC
|
|
*/
|
|
#ifndef _LINUX_CFI_H
|
|
#define _LINUX_CFI_H
|
|
|
|
#ifdef CONFIG_CFI_CLANG
|
|
typedef void (*cfi_check_fn)(uint64_t id, void *ptr, void *diag);
|
|
|
|
/* Compiler-generated function in each module, and the kernel */
|
|
extern void __cfi_check(uint64_t id, void *ptr, void *diag);
|
|
|
|
/*
|
|
* Force the compiler to generate a CFI jump table entry for a function
|
|
* and store the jump table address to __cfi_jt_<function>.
|
|
*/
|
|
#define __CFI_ADDRESSABLE(fn) \
|
|
const void* __cfi_jt_ ## fn __visible = (void *)&fn;
|
|
|
|
#ifdef CONFIG_CFI_CLANG_SHADOW
|
|
|
|
extern void cfi_module_add(struct module *mod, unsigned long base_addr);
|
|
extern void cfi_module_remove(struct module *mod, unsigned long base_addr);
|
|
|
|
#else
|
|
|
|
static inline void cfi_module_add(struct module *mod, unsigned long base_addr) {}
|
|
static inline void cfi_module_remove(struct module *mod, unsigned long base_addr) {}
|
|
|
|
#endif /* CONFIG_CFI_CLANG_SHADOW */
|
|
|
|
#else /* !CONFIG_CFI_CLANG */
|
|
|
|
#define __CFI_ADDRESSABLE(fn)
|
|
|
|
#endif /* CONFIG_CFI_CLANG */
|
|
|
|
#endif /* _LINUX_CFI_H */
|