On 6/18/24 8:20 AM, Segher Boessenkool wrote: > On Mon, Jun 17, 2024 at 08:54:46PM -0500, Peter Bergner wrote: >> So we should be able to shrink-wrap in the presence of the ROP protection. [snip] > But do we want to? And, how far, in what cases not?
My answer to the above would be "yes", "as far as we do today without -mrop-protect" and "none". :-) I don't think -mrop-protect should affect whether we shrink-wrap or not. I don't think shrink-wrapping call free paths makes the compiled code less secure by not emitting the hashst/hashchk insns on those paths, so why would we do anything different wrt shrink-wrapping? Peter
