bpf: disable CFI in dispatcher functions
authorSami Tolvanen <samitolvanen@google.com>
Thu, 8 Apr 2021 18:28:33 +0000 (11:28 -0700)
committerKees Cook <keescook@chromium.org>
Thu, 8 Apr 2021 23:04:21 +0000 (16:04 -0700)
commit9f5b4009980f369acb80b72235b2d66c3fd6eca6
treeb13d52ef509ebb7e7efbb2ecae47763870c83b88
parent8b8e6b5d3b013b0bd849990af2cc0f1321850e19
bpf: disable CFI in dispatcher functions

BPF dispatcher functions are patched at runtime to perform direct
instead of indirect calls. Disable CFI for the dispatcher functions to
avoid conflicts.

Signed-off-by: Sami Tolvanen <samitolvanen@google.com>
Reviewed-by: Kees Cook <keescook@chromium.org>
Tested-by: Nathan Chancellor <nathan@kernel.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20210408182843.1754385-9-samitolvanen@google.com
include/linux/bpf.h