28ac367b86
* Disable redzone. Our LVI mitigations clobber it. This disables the redzone in the gcc compiled SDK, the cargo compiled enclave, the cargo dependencies, and so forth. BOLT is modified to fail if any function that gets a memory indirect jmp mitigation uses the redzone. The checker is also modified to check and fail the build if any functions use the redzone that had a memory indirect jmp mitigation applied. * Disable redzone. Our LVI mitigations clobber it. This disables the redzone in the gcc compiled SDK, the cargo compiled enclave, the cargo dependencies, and so forth. BOLT is modified to fail if any function that gets a memory indirect jmp mitigation uses the redzone. The checker is also modified to check and fail the build if any functions use the redzone that had a memory indirect jmp mitigation applied. Co-authored-by: Nolan Leake <nolan@sigbus.net> |
||
|---|---|---|
| .. | ||
| funcs_with_memindjmp | ||
| gc_functions | ||
| lvi_checker | ||
| sgx-gdb | ||