Page MenuHomeFreeBSD

share/mk: Enable BRANCH_PROTECTION by default
AcceptedPublic

Authored by andrew on Mon, Jan 20, 1:02 PM.

Details

Reviewers
emaste
Group Reviewers
arm64
Summary

This enables Pointer Authentication (PAC) and Branch Target
Identification (BTI) on arm64. These are architecture features that
the compiler can use to help mitigate JOP and ROP attacks.

A rebuild of world with -WITH_CLEAN is suggested as the compilation
of all files may be affected.

Sponsored by: Arm Ltd

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 61802
Build 58686: arc lint + arc unit

Event Timeline

It's probably worth posting the UPDATING text to -CURRENT as well to help make sure this gets noticed.

This revision is now accepted and ready to land.Mon, Jan 20, 1:30 PM