RFR: 8277204: Implementation of JEP 8264130: PAC-RET protection for Linux/AArch64 [v14]
Alan Hayward
duke at openjdk.java.net
Wed Feb 2 09:37:15 UTC 2022
On Wed, 2 Feb 2022 09:29:21 GMT, Alan Hayward <duke at openjdk.java.net> wrote:
>> Given that the implementation has now changed so much that it's no longer NOP based, I'll go with @dholmes-ora .
>> One other thing, though: it might be better to say here "but this VM was built without ROP-protection support." That's more informative, IMO.
>
> Ok, I'll fix up as suggested.
>
> The beginning part of that message needs fixing too - UseROPProtection is no longer the name of the flag. I'll switch to:
> "ROP-protection specified, but this VM was built without ROP-protection support."
And this change will keep ROP protection enabled if we fall into the "this VM was built without ROP-protection support.". In that case we'll be protecting generated code, but the VM itself won't be protected. This will run without crashing.
-------------
PR: https://git.openjdk.java.net/jdk/pull/6334
More information about the build-dev
mailing list