RFR: 8277204: Implementation of JEP 8264130: PAC-RET protection for Linux/AArch64 [v9]

Andrew Haley aph at openjdk.java.net
Sat Dec 11 09:33:12 UTC 2021


On Fri, 10 Dec 2021 15:16:19 GMT, Alan Hayward <duke at openjdk.java.net> wrote:

>> src/hotspot/cpu/aarch64/vm_version_aarch64.cpp line 419:
>> 
>>> 417:     if (UseROPProtection) {
>>> 418:       warning("UseROPProtection specified, but not supported on this CPU.");
>>> 419:       FLAG_SET_DEFAULT(UseROPProtection, false);
>> 
>> Suggestion:
>> 
>>       FLAG_SET_DEFAULT(UseROPProtection, true);
>> 
>> Given that the instructions used are in NOP space, this won't do any harm, and it will allow developers without PAC-enabled systems to see what code PAC would generate.
>
> Ok, I think that's fine. How about on a non pac system allowing it for development only ?

Maybe. Mind you, a lot of the time I'm looking at the output from production systems.
>From a rather philosophical point of view, I assume that if the user of a computer asks for something that isn't going to break anything or confuse anyone, we should honour their request.

-------------

PR: https://git.openjdk.java.net/jdk/pull/6334



More information about the build-dev mailing list