From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-Status: No, score=-4.2 required=3.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, SPF_HELO_PASS,SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from sourceware.org (server2.sourceware.org [8.43.85.97]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 4FC181F5AE for ; Wed, 29 Jul 2020 08:12:12 +0000 (UTC) Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 3542B385700E; Wed, 29 Jul 2020 08:12:11 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 3542B385700E DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1596010331; bh=jEOr7xpcsqr3IDp95WC3NwDsUU0/2LCmjdVx4/+dcdo=; h=To:Subject:References:Date:In-Reply-To:List-Id:List-Unsubscribe: List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc: From; b=ffJdLvq5V9Xaxat8plwlzSm11IRrReer+4yHzOZaL7bPOisa7tKzsB5uFiLOpa4O8 n4HxAlzPVLwA1LSyNv5dStuL/lv6GGgMnTVi68AkuY1O4fb23P0i4998JVtN/hxQTE wRrrriyDC4RD3kPPck8K4NtUQIFZd5nv+aKPvD+k= Received: from us-smtp-delivery-74.mimecast.com (us-smtp-delivery-74.mimecast.com [63.128.21.74]) by sourceware.org (Postfix) with ESMTP id D2F6B3858D35 for ; Wed, 29 Jul 2020 08:12:08 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org D2F6B3858D35 Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-186-d6ImdK1pPsCUw_GmpjsAcQ-1; Wed, 29 Jul 2020 04:12:04 -0400 X-MC-Unique: d6ImdK1pPsCUw_GmpjsAcQ-1 Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.phx2.redhat.com [10.5.11.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 5BCA380183C; Wed, 29 Jul 2020 08:12:03 +0000 (UTC) Received: from oldenburg2.str.redhat.com (ovpn-113-29.ams2.redhat.com [10.36.113.29]) by smtp.corp.redhat.com (Postfix) with ESMTPS id E7AAA712F3; Wed, 29 Jul 2020 08:11:58 +0000 (UTC) To: Szabolcs Nagy Subject: Re: [PATCH] aarch64: update NEWS about branch protection References: <20200729080850.26078-1-szabolcs.nagy@arm.com> Date: Wed, 29 Jul 2020 10:11:57 +0200 In-Reply-To: <20200729080850.26078-1-szabolcs.nagy@arm.com> (Szabolcs Nagy's message of "Wed, 29 Jul 2020 09:08:50 +0100") Message-ID: <87bljyspte.fsf@oldenburg2.str.redhat.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.3 (gnu/linux) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.11 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , From: Florian Weimer via Libc-alpha Reply-To: Florian Weimer Cc: Jakub Jelinek , libc-alpha@sourceware.org, jeremy.linton@arm.com Errors-To: libc-alpha-bounces@sourceware.org Sender: "Libc-alpha" * Szabolcs Nagy: > diff --git a/NEWS b/NEWS > index 1ef4a0a7a4..0e6ad5edc4 100644 > --- a/NEWS > +++ b/NEWS > @@ -70,7 +70,9 @@ Major new features: > > * AArch64 now supports standard branch protection security hardening > in glibc when it is built with a GCC that is configured with > - --enable-standard-branch-protection. This includes branch target > + --enable-standard-branch-protection (or if -mbranch-protection=standard > + flag is passed when building both GCC target libraries and glibc, > + in either case a custom GCC is needed). This includes branch target > identification (BTI) and pointer authentication for return addresses > (PAC-RET). They require armv8.5-a and armv8.3-a architecture > extensions respectively for the protection to be effective, Please clarify if you need to pass the flags in CFLAGS or CC for glibc. Thanks. Florian