From: Yury Khrustalev Date: Tue, 21 Jan 2025 13:44:05 +0000 (+0000) Subject: NEWS: Add note on Guarded Control Stack support X-Git-Tag: glibc-2.41~25 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d4626340b997d662ddca4a48f8a3bf03ccb7a603;p=thirdparty%2Fglibc.git NEWS: Add note on Guarded Control Stack support Reviewed-by: Andreas K. Huettel --- diff --git a/NEWS b/NEWS index b5f15148a0..3a47777018 100644 --- a/NEWS +++ b/NEWS @@ -74,6 +74,16 @@ Major new features: which currently include 'node_id' and 'mm_cid' and will also allow exposing new features as they get added to future Linux kernels. +* The GNU C Library now supports Guarded Control Stack extension that allows + to use shadow stacks on AArch64 systems that support this extension. + Building the library with standard branch protection enabled while using + a toolchain that supports GCS (binutils 2.44 and GCC 15 or later), will + enable GCS support in glibc. There is no special configuration flag. + GCS-enabled glibc is compatible with all existing executables and shared + libraries and will run with and without GCS support in the system. GCS is + opt-in and can be controlled at runtime via the glibc.cpu.aarch64_gcs + tunable, By default GCS is disabled. Linux kernel supports this since 6.13. + Deprecated and removed features, and other changes affecting compatibility: * The big-endian ARC port (arceb-linux-gnu) has been removed.