From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-108-mta90.mxroute.com (mail-108-mta90.mxroute.com [136.175.108.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D768B3DD84C for ; Fri, 5 Jun 2026 18:53:48 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=136.175.108.90 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780685630; cv=none; b=D+WsXyVl+wqc6gT9VgktRUke1P91S6vAp4kAnGANnKXc5I6Ro8oKZqhuSn+1f+knSrtFWuJkk/Ecwqe5HgDm/ExuJGVxpbfGkjkaygr307hT9iQ5x/lg1MSrWNKeHktUwSoWr4NQDov0mbGzhJyV23nOs7Gt4CnL4MM3H4e2nE8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780685630; c=relaxed/simple; bh=U881s5n9/+Yxk0Tltn7Rw415Nvtzme8MYOKwt5z08hY=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=g479AWwGKKwaZE4QGWp8onD+v8v9IndzfFBQfj8K0uA63o4v9pZdCdfpM45JaHO7+PjP0B7whhyiNcRfIQ+jzP7j5X9bscCYJ9cek4uBkCLDkq9pMtNsXNZGgKItddWXOMa9qb/wmGoo9gGoeIaEU3A2oQ+VgGju+DMYANANsMU= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=wii.dev; spf=pass smtp.mailfrom=wii.dev; dkim=pass (2048-bit key) header.d=wii.dev header.i=@wii.dev header.b=WZ5fOsby; arc=none smtp.client-ip=136.175.108.90 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=wii.dev Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=wii.dev Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=wii.dev header.i=@wii.dev header.b="WZ5fOsby" Received: from filter006.mxroute.com ([136.175.111.3] filter006.mxroute.com) (Authenticated sender: mN4UYu2MZsgR) by mail-108-mta90.mxroute.com (ZoneMTA) with ESMTPSA id 19e991d9c9800067f7.00e for (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384); Fri, 05 Jun 2026 18:48:35 +0000 X-Zone-Loop: e08f8501c6ed8f54bcd72ea227a772ba6f50b0b834dc DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=wii.dev; s=x; h=Content-Transfer-Encoding:MIME-Version:References:In-Reply-To: Message-ID:Date:Subject:Cc:To:From:Sender:Reply-To:Content-Type:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=6AX3Kzk5v2aPc0+AOTs3qurotM7xs8HKDdOmhlGXq5E=; b=WZ5fOsbyQbvaroTQRcCkcW9W7e MB+jp/ZukqdrWvogamhTS44U2byoLfiZg6bTBv4LaWCHxhvcZgJob9h0CD8h18hwkc1ufuZwmowON G1Bu2wMt6UJSLzMAeah9MwIvZ+n0+aenatJ3OIHGIKOSj4NqaoQA8xfgS55xd90ArgXY6e2N6jF0R rASmViWwljyiQXEi++6WU+BQ64iC9RS5EZyJJwa1ndXofshSs/IvV/QvfRYzNI63R8KYTLL2J3iNg Nv986GsAOl9Oe33EbuamDCvlF4xO9LsFPmX8oYBr0rzpLOKZxjmYh9c9HOizmMxFmCakyv9NrkTgh t8HAxdMg==; From: Richard Patel To: x86@kernel.org, "H. Peter Anvin" , Peter Zijlstra Cc: Rick Edgecombe , Yu-cheng Yu , Dave Hansen , Thomas Gleixner , Ingo Molnar , Borislav Petkov , David Laight , Andy Lutomirski , Kees Cook , Shuah Khan , linux-kselftest@vger.kernel.org, linux-kernel@vger.kernel.org, Florian Weimer , Richard Patel Subject: [PATCH v2 4/5] x86/entry/vdso: build with IBT support Date: Fri, 5 Jun 2026 18:47:15 +0000 Message-ID: <20260605184715.3383415-6-ripatel@wii.dev> In-Reply-To: <20260605184715.3383415-2-ripatel@wii.dev> References: <20260605184715.3383415-2-ripatel@wii.dev> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Authenticated-Id: ripatel@wii.dev VDSO should expose ENDBR instructions now that usermode IBT is available. Signed-off-by: Richard Patel --- arch/x86/entry/vdso/common/Makefile.include | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/arch/x86/entry/vdso/common/Makefile.include b/arch/x86/entry/vdso/common/Makefile.include index 687b3d89b40d..a0dc69b7a330 100644 --- a/arch/x86/entry/vdso/common/Makefile.include +++ b/arch/x86/entry/vdso/common/Makefile.include @@ -46,8 +46,7 @@ flags-y += -fasynchronous-unwind-tables # Reset cf protections enabled by compiler default flags-y += $(call cc-option, -fcf-protection=none) flags-$(X86_USER_SHADOW_STACK) += $(call cc-option, -fcf-protection=return) -# When user space IBT is supported, enable this. -# flags-$(CONFIG_USER_IBT) += $(call cc-option, -fcf-protection=branch) +flags-$(CONFIG_X86_USER_IBT) += $(call cc-option, -fcf-protection=branch) flags-$(CONFIG_MITIGATION_RETPOLINE) += $(RETPOLINE_VDSO_CFLAGS) -- 2.47.3