]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
[3.12] gh-128605: Add branch protections for x86_64 in asm_trampolineS (#128606)...
authorstratakis <cstratak@redhat.com>
Thu, 10 Jul 2025 10:22:14 +0000 (12:22 +0200)
committerGitHub <noreply@github.com>
Thu, 10 Jul 2025 10:22:14 +0000 (11:22 +0100)
commitaaca85949ae471b568b6beea00b3380e553ccf39
tree352eddeabea6ac2babf9619f254510fbc2ffebd5
parentb69f3118a9e1eb00f5dd5447215787bbd7a72ad2
[3.12] gh-128605: Add branch protections for x86_64 in asm_trampolineS (#128606) (#135094)

[3.12] gh-128605: Add branch protections for x86_64 in asm_trampoline.S (#128606)

Apply Intel Control-flow Technology for x86-64 on asm_trampoline.S.

Required for mitigation against return-oriented programming (ROP)
and Call or Jump Oriented Programming (COP/JOP) attacks.

Manual application is required for the assembly files.

See also: https://sourceware.org/annobin/annobin.html/Test-cf-protection.html
Python/asm_trampoline.S