lkrg-org / lkrg

Linux Kernel Runtime Guard
https://lkrg.org
Other
410 stars 72 forks source link

Make pCFI AArch64 PAC compatible #250

Open solardiz opened 1 year ago

solardiz commented 1 year ago

To get LKRG to fully work on CPUs+kernels supporting the latest AArch64 extensions, besides fixing #183 for BTI support we also need to make our pCFI checks compatible with PAC. To do this, we'll probably need to mask out the PAC bits in our checks of pointers seen on the stack, but only when system_supports_address_auth().