RFR: 8277204: Implementation of JEP 8264130: PAC-RET protection for Linux/AArch64 [v14]

[Andrew Dinn]

On Mon, 24 Jan 2022 17:07:54 GMT, Alan Hayward <duke at openjdk.java.net> wrote:

> check_return_address() is being a huge help here

Yes, I appreciate that rejecting double signing is a good model.The surprise was solely a reflection of my limited understanding.

> There's no obvious way to catch those issues.

Ok, well in that case I guess I'm all right for this to be pushed as is. However, the other reviewers really need to give a nod before you proceed.

> Once this is in, getting some regular testing will be fairly crucial to make sure it doesn't rot.

I am hoping we will get that *informally* as Java developers get their hands on shiny new M1 macs and start using them in anger. However, I agree that having regular test runs for mac-aarch64 is a necessity.

-------------

PR: https://git.openjdk.java.net/jdk/pull/6334