[RFC,01/21] efi/libstub: Filter out CC_FLAGS_CFI

Message ID	20220429203644.2868448-2-samitolvanen@google.com (mailing list archive)
State	Superseded
Headers	show Return-Path: <linux-hardening-owner@kernel.org> Date: Fri, 29 Apr 2022 13:36:24 -0700 In-Reply-To: <20220429203644.2868448-1-samitolvanen@google.com> Message-Id: <20220429203644.2868448-2-samitolvanen@google.com> Mime-Version: 1.0 References: <20220429203644.2868448-1-samitolvanen@google.com> Subject: [RFC PATCH 01/21] efi/libstub: Filter out CC_FLAGS_CFI From: Sami Tolvanen <samitolvanen@google.com> To: linux-kernel@vger.kernel.org Cc: Kees Cook <keescook@chromium.org>, Josh Poimboeuf <jpoimboe@redhat.com>, Peter Zijlstra <peterz@infradead.org>, x86@kernel.org, Catalin Marinas <catalin.marinas@arm.com>, Will Deacon <will@kernel.org>, Mark Rutland <mark.rutland@arm.com>, Nathan Chancellor <nathan@kernel.org>, Nick Desaulniers <ndesaulniers@google.com>, Joao Moreira <joao@overdrivepizza.com>, Sedat Dilek <sedat.dilek@gmail.com>, Steven Rostedt <rostedt@goodmis.org>, linux-hardening@vger.kernel.org, linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev, Sami Tolvanen <samitolvanen@google.com> Content-Type: text/plain; charset="UTF-8" Precedence: bulk
Series	KCFI support \| expand [RFC,00/21] KCFI support [RFC,01/21] efi/libstub: Filter out CC_FLAGS_CFI [RFC,02/21] arm64/vdso: Filter out CC_FLAGS_CFI [RFC,03/21] kallsyms: Ignore __kcfi_typeid_ [RFC,04/21] cfi: Remove CONFIG_CFI_CLANG_SHADOW [RFC,05/21] cfi: Drop __CFI_ADDRESSABLE [RFC,06/21] cfi: Switch to -fsanitize=kcfi [RFC,07/21] cfi: Add type helper macros [RFC,08/21] arm64/crypto: Add types to indirect called assembly functions [RFC,09/21] arm64: Add CFI error handling [RFC,10/21] treewide: Drop function_nocfi [RFC,11/21] treewide: Drop WARN_ON_FUNCTION_MISMATCH [RFC,12/21] treewide: Drop __cficanonical [RFC,13/21] cfi: Add the cfi_unchecked macro [RFC,14/21] treewide: static_call: Pass call arguments to the macro [RFC,15/21] static_call: Use cfi_unchecked [RFC,16/21] objtool: Add support for CONFIG_CFI_CLANG [RFC,17/21] x86/tools/relocs: Ignore __kcfi_typeid_ relocations [RFC,18/21] x86: Add types to indirect called assembly functions [RFC,19/21] x86/purgatory: Disable CFI [RFC,20/21] x86/vdso: Disable CFI [RFC,21/21] x86: Add support for CONFIG_CFI_CLANG

Message ID

20220429203644.2868448-2-samitolvanen@google.com (mailing list archive)

State

Superseded

Headers

Date: Fri, 29 Apr 2022 13:36:24 -0700
In-Reply-To: <20220429203644.2868448-1-samitolvanen@google.com>
Message-Id: <20220429203644.2868448-2-samitolvanen@google.com>
Mime-Version: 1.0
References: <20220429203644.2868448-1-samitolvanen@google.com>
Subject: [RFC PATCH 01/21] efi/libstub: Filter out CC_FLAGS_CFI
From: Sami Tolvanen <samitolvanen@google.com>
To: linux-kernel@vger.kernel.org
Cc: Kees Cook <keescook@chromium.org>,
        Josh Poimboeuf <jpoimboe@redhat.com>,
        Peter Zijlstra <peterz@infradead.org>, x86@kernel.org,
        Catalin Marinas <catalin.marinas@arm.com>,
        Will Deacon <will@kernel.org>,
        Mark Rutland <mark.rutland@arm.com>,
        Nathan Chancellor <nathan@kernel.org>,
        Nick Desaulniers <ndesaulniers@google.com>,
        Joao Moreira <joao@overdrivepizza.com>,
        Sedat Dilek <sedat.dilek@gmail.com>,
        Steven Rostedt <rostedt@goodmis.org>,
        linux-hardening@vger.kernel.org,
        linux-arm-kernel@lists.infradead.org, llvm@lists.linux.dev,
        Sami Tolvanen <samitolvanen@google.com>
Content-Type: text/plain; charset="UTF-8"
Precedence: bulk

Series

KCFI support | expand

Commit Message

Sami Tolvanen April 29, 2022, 8:36 p.m. UTC

Explicitly filter out CC_FLAGS_CFI in preparation for the flags being
removed from CC_FLAGS_LTO.

Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
---
 drivers/firmware/efi/libstub/Makefile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/drivers/firmware/efi/libstub/Makefile b/drivers/firmware/efi/libstub/Makefile
index d0537573501e..234fb2910622 100644
--- a/drivers/firmware/efi/libstub/Makefile
+++ b/drivers/firmware/efi/libstub/Makefile
@@ -39,6 +39,8 @@  KBUILD_CFLAGS			:= $(cflags-y) -Os -DDISABLE_BRANCH_PROFILING \
 
 # remove SCS flags from all objects in this directory
 KBUILD_CFLAGS := $(filter-out $(CC_FLAGS_SCS), $(KBUILD_CFLAGS))
+# disable CFI
+KBUILD_CFLAGS := $(filter-out $(CC_FLAGS_CFI), $(KBUILD_CFLAGS))
 # disable LTO
 KBUILD_CFLAGS := $(filter-out $(CC_FLAGS_LTO), $(KBUILD_CFLAGS))

[RFC,01/21] efi/libstub: Filter out CC_FLAGS_CFI

Commit Message

Patch