]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
projects / thirdparty / Python / cpython.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 89df01b) | patch
[3.14] gh-128605: Add branch protections for x86_64 in asm_trampoline.S (#128606...
authorstratakis <cstratak@redhat.com>
Tue, 3 Jun 2025 13:31:06 +0000 (15:31 +0200)
committerGitHub <noreply@github.com>
Tue, 3 Jun 2025 13:31:06 +0000 (15:31 +0200)
commit899cca6dbf76bf3e06a99f60a5f996ad6ba0761f
tree5788f28bd7d8e428bc09ade4595dcb4859bd3795tree | snapshot
parent89df01bd2718fb43f2dd1f884381cb9f2a7cf289commit | diff
[3.14] gh-128605: Add branch protections for x86_64 in asm_trampoline.S (#128606) (#135077)

Apply Intel Control-flow Technology for x86-64 on asm_trampoline.S.

Required for mitigation against return-oriented programming (ROP)
and Call or Jump Oriented Programming (COP/JOP) attacks.

Manual application is required for the assembly files.

See also: https://sourceware.org/annobin/annobin.html/Test-cf-protection.html
Python/asm_trampoline.S diff | blob | blame | history
Python/perf_jit_trampoline.c diff | blob | blame | history
Mirror of https://github.com/python/cpython.git