gh-128605: Add branch protections for x86_64 in asm_trampoline.S (#12… · python/cpython@485b499 · GitHub
Skip to content

Commit 485b499

Browse files
authored
gh-128605: Add branch protections for x86_64 in asm_trampoline.S (#128606)
Apply Intel Control-flow Technology for x86-64 on asm_trampoline.S. Required for mitigation against return-oriented programming (ROP) and Call or Jump Oriented Programming (COP/JOP) attacks. Manual application is required for the assembly files. See also: https://sourceware.org/annobin/annobin.html/Test-cf-protection.html
1 parent 6e80f11 commit 485b499

2 files changed

Lines changed: 26 additions & 0 deletions

File tree

Python/asm_trampoline.S

Lines changed: 22 additions & 0 deletions

Python/perf_jit_trampoline.c

Lines changed: 4 additions & 0 deletions

0 commit comments

Comments
 (0)