Re: ruby arm64 BTI

2024-06-22 Thread Theo de Raadt
Mark Kettenis wrote: > > From: "Theo de Raadt" > > Date: Sat, 22 Jun 2024 06:16:03 -0600 > > > > Mark Kettenis wrote: > > > > > Theo pointed out the NOBTCFI reversal here. Now the reason that we > > > still see SIGILL despite fixes to the assembly code is because the > > > -mbranch-protectio

Re: ruby arm64 BTI

2024-06-22 Thread Mark Kettenis
> From: "Theo de Raadt" > Date: Sat, 22 Jun 2024 06:16:03 -0600 > > Mark Kettenis wrote: > > > Theo pointed out the NOBTCFI reversal here. Now the reason that we > > still see SIGILL despite fixes to the assembly code is because the > > -mbranch-protection=pac-ret option added by the configure

Re: ruby arm64 BTI

2024-06-22 Thread Jeremy Evans
On 06/22 01:41, Mark Kettenis wrote: > Theo pointed out the NOBTCFI reversal here. Now the reason that we > still see SIGILL despite fixes to the assembly code is because the > -mbranch-protection=pac-ret option added by the configure script > actually downgrades our default of enabling both BTI a

Re: ruby arm64 BTI

2024-06-22 Thread Theo de Raadt
Mark Kettenis wrote: > Theo pointed out the NOBTCFI reversal here. Now the reason that we > still see SIGILL despite fixes to the assembly code is because the > -mbranch-protection=pac-ret option added by the configure script > actually downgrades our default of enabling both BTI and PAC to just

ruby arm64 BTI

2024-06-22 Thread Mark Kettenis
Theo pointed out the NOBTCFI reversal here. Now the reason that we still see SIGILL despite fixes to the assembly code is because the -mbranch-protection=pac-ret option added by the configure script actually downgrades our default of enabling both BTI and PAC to just enabling PAC. So the necessar