Re: [PATCH v2 6/6] configure: add support for Control-Flow Integrity

2020-10-26 Thread Paolo Bonzini
On 23/10/20 22:06, Daniele Buono wrote: > + > +if test "$cfi" = "yes"; then > + # Compiler/Linker Flags that needs to be added for cfi: > + # -fsanitize=cfi-icall to enable control-flow integrity checks on > + #indirect function calls. > + # -fsanitize-cfi-icall-generalize-pointers

[PATCH v2 6/6] configure: add support for Control-Flow Integrity

2020-10-23 Thread Daniele Buono
This patch adds a flag to enable/disable control flow integrity checks on indirect function calls. This feature only allows indirect function calls at runtime to functions with compatible signatures. This feature is only provided by LLVM/Clang, and depends on link-time optimization which is curren