On Thu, Mar 11, 2021 at 6:51 PM Kees Cook <[email protected]> wrote: > > On Thu, Mar 11, 2021 at 04:49:19PM -0800, Sami Tolvanen wrote: > > Select ARCH_SUPPORTS_CFI_CLANG to allow CFI to be enabled. > > > > Signed-off-by: Sami Tolvanen <[email protected]> > > Reviewed-by: Kees Cook <[email protected]> > > Random thought: the vDSO doesn't need special handling because it > doesn't make any indirect calls, yes?
That might be true, but we also filter out CC_FLAGS_LTO for the vDSO, which disables CFI as well. Sami
