RFR: 8277204: Implementation of JEP 8264130: PAC-RET protection for Linux/AArch64 [v9]
Alan Hayward
duke at openjdk.java.net
Fri Dec 10 15:19:21 UTC 2021
On Fri, 10 Dec 2021 13:21:46 GMT, Andrew Haley <aph at openjdk.org> wrote:
>> Alan Hayward has updated the pull request incrementally with one additional commit since the last revision:
>>
>> Default to building without branch-protection
>
> src/hotspot/cpu/aarch64/vm_version_aarch64.cpp line 419:
>
>> 417: if (UseROPProtection) {
>> 418: warning("UseROPProtection specified, but not supported on this CPU.");
>> 419: FLAG_SET_DEFAULT(UseROPProtection, false);
>
> Suggestion:
>
> FLAG_SET_DEFAULT(UseROPProtection, true);
>
> Given that the instructions used are in NOP space, this won't do any harm, and it will allow developers without PAC-enabled systems to see what code PAC would generate.
Ok, I think that's fine. How about on a non pac system allowing it for development only ?
-------------
PR: https://git.openjdk.java.net/jdk/pull/6334
More information about the hotspot-dev
mailing list