From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-Status: No, score=-3.9 required=3.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, MSGID_FROM_MTA_HEADER,SPF_HELO_PASS,SPF_PASS,UNPARSEABLE_RELAY shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from sourceware.org (server2.sourceware.org [IPv6:2620:52:3:1:0:246e:9693:128c]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 805D21F5AE for ; Wed, 29 Jul 2020 09:17:51 +0000 (UTC) Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 69AFB3857C5F; Wed, 29 Jul 2020 09:17:49 +0000 (GMT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60073.outbound.protection.outlook.com [40.107.6.73]) by sourceware.org (Postfix) with ESMTPS id 926653858D35 for ; Wed, 29 Jul 2020 09:17:46 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 926653858D35 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=arm.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=Szabolcs.Nagy@arm.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ajq5+tmbY16DC4ZnXPGlXV07RBGM4QG+GxjGXmM4kAI=; b=YgrdInPO0NZHHIBxLIahGvCydfwJK2qjCMz1z9mSKkPW9C/I3JAJGeMHD05j2pQWWI81zwQISymHnTzQSAxNndzosXNVGixynkyUODze7+wOB6wyFw0WtCZKA4LsZ0kj77hzZdva4idjjP3Y5lCABCPB8gWJn7LSS4FqjmSv5Gk= Received: from DB6PR0501CA0002.eurprd05.prod.outlook.com (2603:10a6:4:8f::12) by HE1PR0802MB2490.eurprd08.prod.outlook.com (2603:10a6:3:d9::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.16; Wed, 29 Jul 2020 09:17:44 +0000 Received: from DB5EUR03FT038.eop-EUR03.prod.protection.outlook.com (2603:10a6:4:8f:cafe::cf) by DB6PR0501CA0002.outlook.office365.com (2603:10a6:4:8f::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.16 via Frontend Transport; Wed, 29 Jul 2020 09:17:44 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; sourceware.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com; sourceware.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT038.mail.protection.outlook.com (10.152.21.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.10 via Frontend Transport; Wed, 29 Jul 2020 09:17:43 +0000 Received: ("Tessian outbound 8f45de5545d6:v62"); Wed, 29 Jul 2020 09:17:43 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: c9e6d9a59954167f X-CR-MTA-TID: 64aa7808 Received: from eb3e7635ed53.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 35D7F213-2042-4FA0-830A-19F5C238AC06.1; Wed, 29 Jul 2020 09:17:38 +0000 Received: from EUR04-DB3-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id eb3e7635ed53.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 29 Jul 2020 09:17:38 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Sa6noCSqBQ7AtemWgydfufak7znNeOKvn+RPGorw82Me39Glej9xMLcy9dRk5jqLc4xsfcxBmCUhFs1DuxFanfj3cBL2bF4E4IHxlWAwk1FvYH5tb2FqIZ6iJUee2Q6eKBnJHRV6IW41PYQMvszCreBVVlTBXKibMGSnP5U9+vRjiJJP0KGuhzvUHxw/vltNpjkUZRXo/Ra+nIC6M5z+A/PEEGhcvzZQU7VSwWkNCNEaGlvQ1sGaDEOixmKw2GFGvrQJBxIiEcta5+2UgUyK7pICNrAgh5EsCidKdl4mqnve1tpHWmcTWAhgaxZGG66fJqNYQuo5+oeo4cUh4m91jQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ajq5+tmbY16DC4ZnXPGlXV07RBGM4QG+GxjGXmM4kAI=; b=PzfYIX+VUy7Mpj7HCXcjXdIsWfDj3agymw0dcKCB9VW+RfM+9qF6FG07NlGt2jZG6wSDZ9ke3cfzd6UlsopB3acnebhjDjQcqZH4ogywPnpwrLjrvc6PGlyrAXIWG6wRVtWH9RyJwYahX7Hdyo4cYoORstaRHYO183kmT36eKfxe16FT1Vt5JZUyz+23jON3S2a/8S1wVESLG0Xtzog4cEs/fnH0YXqMCHcTk5QPYio252pvMEdcvZGFoOfbE/1lw0PxUSTB9oijLQOOvRP9AGiVzLyuoMasL3HaVRML6FaPFj56AGNHDLknPpx5P9VhxtzAOacDB9WZnxQcKTIzRg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ajq5+tmbY16DC4ZnXPGlXV07RBGM4QG+GxjGXmM4kAI=; b=YgrdInPO0NZHHIBxLIahGvCydfwJK2qjCMz1z9mSKkPW9C/I3JAJGeMHD05j2pQWWI81zwQISymHnTzQSAxNndzosXNVGixynkyUODze7+wOB6wyFw0WtCZKA4LsZ0kj77hzZdva4idjjP3Y5lCABCPB8gWJn7LSS4FqjmSv5Gk= Authentication-Results-Original: redhat.com; dkim=none (message not signed) header.d=none;redhat.com; dmarc=none action=none header.from=arm.com; Received: from AM6PR08MB3047.eurprd08.prod.outlook.com (2603:10a6:209:4c::23) by AM6PR08MB3464.eurprd08.prod.outlook.com (2603:10a6:20b:43::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.27; Wed, 29 Jul 2020 09:17:37 +0000 Received: from AM6PR08MB3047.eurprd08.prod.outlook.com ([fe80::2404:de9f:78c0:313c]) by AM6PR08MB3047.eurprd08.prod.outlook.com ([fe80::2404:de9f:78c0:313c%6]) with mapi id 15.20.3216.033; Wed, 29 Jul 2020 09:17:37 +0000 Date: Wed, 29 Jul 2020 10:17:34 +0100 From: Szabolcs Nagy To: Florian Weimer Subject: Re: [PATCH] aarch64: update NEWS about branch protection Message-ID: <20200729091734.GT7127@arm.com> References: <20200729080850.26078-1-szabolcs.nagy@arm.com> <87bljyspte.fsf@oldenburg2.str.redhat.com> <20200729084930.GS7127@arm.com> <87lfj2r8z4.fsf@oldenburg2.str.redhat.com> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <87lfj2r8z4.fsf@oldenburg2.str.redhat.com> User-Agent: Mutt/1.9.4 (2018-02-28) X-ClientProxiedBy: LO2P265CA0467.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:a2::23) To AM6PR08MB3047.eurprd08.prod.outlook.com (2603:10a6:209:4c::23) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from arm.com (217.140.106.52) by LO2P265CA0467.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:a2::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3216.23 via Frontend Transport; Wed, 29 Jul 2020 09:17:36 +0000 X-Originating-IP: [217.140.106.52] X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: e9f15b17-dec4-4046-7487-08d833a04052 X-MS-TrafficTypeDiagnostic: AM6PR08MB3464:|HE1PR0802MB2490: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true NoDisclaimer: true X-MS-Oob-TLC-OOBClassifiers: OLM:9508;OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: /hfZcFTielnkse6vYRpxMy7Q+/kDPODthqWVWqGwMYjouXonw2jDxk0FS9T9TwU1y/vrRn5Ddg5ycr9XDw9yw1A5Mkvp1/boVk41Cvh8WKff/U/JEW8LfE7gRg2Jt4xurpEjKkcfqb+xCjh2g+TqlwuB52/tuw7vz7i0hfcbt8tLHk/+eoyxyZpAWyvLc7k2Od8XZ67iHdee3IOjCxfQ/qa7rjcaK8WzijNKpG5EExhsLC7m54JkOy2ueugEthbG8B4GWYTIp7zfV5+NW+hHeoYJ/L1Vwxj6cJ+IVnkzRad3RJg2ZUguUc93ObCSpChuHSOCuCcoCRQheuPI6XYk/A== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3047.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(376002)(346002)(366004)(136003)(39850400004)(396003)(4326008)(36756003)(26005)(2906002)(8936002)(33656002)(8886007)(7696005)(66946007)(316002)(15650500001)(52116002)(8676002)(66476007)(66556008)(186003)(16526019)(54906003)(86362001)(6916009)(478600001)(5660300002)(2616005)(55016002)(956004)(44832011)(1076003)(83380400001); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData: 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 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3464 Original-Authentication-Results: redhat.com; dkim=none (message not signed) header.d=none;redhat.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT038.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: 54a4b6b9-e375-46c9-fbb8-08d833a03c08 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: rZKYk8SlAhQgIIgmL3A1GkN9q+h7dfuhpp9c0pZ4wV/EGj5So7xkHZLZR5pZmuYgoAtyFsraQrMewmdG8bUmPzMJP2Gf3wpwwXqE7F1g4FO7P25puwgAOHg4N6T3ihV//P8hNgIICN4hOFOD+9jkjxZG9o7kcjFPjwZWJwn3Max96Q3h51iJdOo2uodcNGzV/ivZXTqA035uib4teEryP/zEljfwkcLMTX3UUpPl3oqXPGw1myprg1tYoC6Y70cvZyD0Gl60/9FEjxDt3u9GBM+8JHir+mk7YgSu3A6Tq+UC6q+dGcZq6DzXP4GI+ypLtx4AXPnU46KsZCfi4ASqk1fbMp+BC1UGD/6yO+xN52k2XkiXPvkGyfgR3UGG8qGwWLPznxnw7Jwtai0M7SCu7g== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(136003)(346002)(396003)(39850400004)(376002)(46966005)(8886007)(33656002)(44832011)(336012)(956004)(2616005)(70586007)(1076003)(5660300002)(81166007)(70206006)(54906003)(316002)(82310400002)(356005)(55016002)(47076004)(16526019)(186003)(26005)(82740400003)(83380400001)(36756003)(7696005)(15650500001)(2906002)(6862004)(4326008)(8676002)(478600001)(8936002)(86362001); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Jul 2020 09:17:43.9784 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: e9f15b17-dec4-4046-7487-08d833a04052 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT038.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0802MB2490 X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Jakub Jelinek , libc-alpha@sourceware.org, jeremy.linton@arm.com Errors-To: libc-alpha-bounces@sourceware.org Sender: "Libc-alpha" The 07/29/2020 11:01, Florian Weimer wrote: > * Szabolcs Nagy: > > > The 07/29/2020 10:11, Florian Weimer wrote: > >> * Szabolcs Nagy: > >> > >> > diff --git a/NEWS b/NEWS > >> > index 1ef4a0a7a4..0e6ad5edc4 100644 > >> > --- a/NEWS > >> > +++ b/NEWS > >> > @@ -70,7 +70,9 @@ Major new features: > >> > > >> > * AArch64 now supports standard branch protection security hardening > >> > in glibc when it is built with a GCC that is configured with > >> > - --enable-standard-branch-protection. This includes branch target > >> > + --enable-standard-branch-protection (or if -mbranch-protection=standard > >> > + flag is passed when building both GCC target libraries and glibc, > >> > + in either case a custom GCC is needed). This includes branch target > >> > identification (BTI) and pointer authentication for return addresses > >> > (PAC-RET). They require armv8.5-a and armv8.3-a architecture > >> > extensions respectively for the protection to be effective, > >> > >> Please clarify if you need to pass the flags in CFLAGS or CC for glibc. > >> Thanks. > > > > cflags is enough, but it is hard to tell what > > the glibc build system does with the various > > cflags. > > > > if i simply override CFLAGS i get > > # error "glibc cannot be compiled without optimization" > > Okay, I trust you that CFLAGS is enough. > > Are there any ELF notes I should watch out for? readelf should show GNU 0x00000010 NT_GNU_PROPERTY_TYPE_0 Properties: AArch64 feature: BTI (PAC may be missing in some libgcc asm, that's fixed up in gcc-trunk, but it's harmless.) e.g. this should not print any file in the install dir: find . -type f |while read i do # skip non-elf files aarch64-none-linux-gnu-readelf -h $i >/dev/null 2>&1 || continue # print if missing BTI note aarch64-none-linux-gnu-readelf -nW $i |grep -q BTI || echo $i done > > My RM delegation has already expired, so I cannot approve your patch. ok.