]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
gh-128605: Add branch protections for x86_64 in asm_trampoline.S (#128606)
authorstratakis <cstratak@redhat.com>
Tue, 3 Jun 2025 07:09:43 +0000 (09:09 +0200)
committerGitHub <noreply@github.com>
Tue, 3 Jun 2025 07:09:43 +0000 (09:09 +0200)
commit485b499610eefe362faf171f258b3a3588378ff1
treee16028450a13b153114f52bcb6ecfde61720f6f2
parent6e80f11eb5eba360334b4ace105eb7d73394baf7
gh-128605: Add branch protections for x86_64 in asm_trampoline.S (#128606)

Apply Intel Control-flow Technology for x86-64 on asm_trampoline.S.

Required for mitigation against return-oriented programming (ROP)
and Call or Jump Oriented Programming (COP/JOP) attacks.

Manual application is required for the assembly files.

See also: https://sourceware.org/annobin/annobin.html/Test-cf-protection.html
Python/asm_trampoline.S
Python/perf_jit_trampoline.c