diff options
| author | H.J. Lu <hjl.tools@gmail.com> | 2022-03-11 12:51:34 -0800 |
|---|---|---|
| committer | H.J. Lu <hjl.tools@gmail.com> | 2022-05-24 09:05:07 -0700 |
| commit | 2f4f7de787e5844515d27b2269fc472f95a9916a (patch) | |
| tree | c1fe8a2d06e4412c1dbaa7534c7c2bcc7e4862bc /zlib/zconf.h.in | |
| parent | cde52d3a2d02d037da53e6974d5e39021030b346 (diff) | |
| download | gcc-2f4f7de787e5844515d27b2269fc472f95a9916a.zip gcc-2f4f7de787e5844515d27b2269fc472f95a9916a.tar.gz gcc-2f4f7de787e5844515d27b2269fc472f95a9916a.tar.bz2 | |
x86: Document -mcet-switch
When -fcf-protection=branch is used, the compiler will generate jump
tables for switch statements where the indirect jump is prefixed with
the NOTRACK prefix, so it can jump to non-ENDBR targets. Since the
indirect jump targets are generated by the compiler and stored in
read-only memory, this does not result in a direct loss of hardening.
But if the jump table index is attacker-controlled, the indirect jump
may not be constrained by CET.
Document -mcet-switch to generate jump tables for switch statements with
ENDBR and skip the NOTRACK prefix for indirect jump. This option should
be used when the NOTRACK prefix is disabled.
PR target/104816
* config/i386/i386.opt: Remove Undocumented.
* doc/invoke.texi: Document -mcet-switch.
Diffstat (limited to 'zlib/zconf.h.in')
0 files changed, 0 insertions, 0 deletions