|
 |
d8f365 |
From 5a5e7890cefa112e95e1de9800d8081c2a38a1da Mon Sep 17 00:00:00 2001
|
|
|
d8f365 |
From: "H.J. Lu" <hjl.tools@gmail.com>
|
|
|
d8f365 |
Date: Wed, 5 Jan 2022 18:04:21 -0800
|
|
|
d8f365 |
Subject: [PATCH 4/4] x86: Generate INT3 for __builtin_eh_return
|
|
|
d8f365 |
|
|
|
d8f365 |
Generate INT3 after indirect jmp in exception return for -fcf-protection
|
|
|
d8f365 |
with -mharden-sls=indirect-jmp.
|
|
|
d8f365 |
|
|
|
d8f365 |
gcc/
|
|
|
d8f365 |
|
|
|
d8f365 |
PR target/103925
|
|
|
d8f365 |
* config/i386/i386.c (ix86_output_indirect_function_return):
|
|
|
d8f365 |
Generate INT3 after indirect jmp for -mharden-sls=indirect-jmp.
|
|
|
d8f365 |
|
|
|
d8f365 |
gcc/testsuite/
|
|
|
d8f365 |
|
|
|
d8f365 |
PR target/103925
|
|
|
d8f365 |
* gcc.target/i386/harden-sls-6.c: New test.
|
|
|
d8f365 |
|
|
|
d8f365 |
(cherry picked from commit c2e5c4feed32c808591b5278f680bbabe63eb225)
|
|
|
d8f365 |
---
|
|
|
d8f365 |
gcc/config/i386/i386.c | 9 ++++++---
|
|
|
d8f365 |
gcc/testsuite/gcc.target/i386/harden-sls-6.c | 18 ++++++++++++++++++
|
|
|
d8f365 |
2 files changed, 24 insertions(+), 3 deletions(-)
|
|
|
d8f365 |
create mode 100644 gcc/testsuite/gcc.target/i386/harden-sls-6.c
|
|
|
d8f365 |
|
|
|
d8f365 |
diff --git a/gcc/config/i386/i386.c b/gcc/config/i386/i386.c
|
|
|
d8f365 |
index 3bc14e20105..dbc3d462fda 100644
|
|
|
d8f365 |
--- a/gcc/config/i386/i386.c
|
|
|
d8f365 |
+++ b/gcc/config/i386/i386.c
|
|
|
d8f365 |
@@ -29083,11 +29083,14 @@ ix86_output_indirect_function_return (rtx ret_op)
|
|
|
d8f365 |
}
|
|
|
d8f365 |
else
|
|
|
d8f365 |
output_indirect_thunk (need_prefix, regno);
|
|
|
d8f365 |
-
|
|
|
d8f365 |
- return "";
|
|
|
d8f365 |
}
|
|
|
d8f365 |
else
|
|
|
d8f365 |
- return "%!jmp\t%A0";
|
|
|
d8f365 |
+ {
|
|
|
d8f365 |
+ output_asm_insn ("%!jmp\t%A0", &ret_op);
|
|
|
d8f365 |
+ if (ix86_harden_sls & harden_sls_indirect_jmp)
|
|
|
d8f365 |
+ fputs ("\tint3\n", asm_out_file);
|
|
|
d8f365 |
+ }
|
|
|
d8f365 |
+ return "";
|
|
|
d8f365 |
}
|
|
|
d8f365 |
|
|
|
d8f365 |
/* Split simple return with popping POPC bytes from stack to indirect
|
|
|
d8f365 |
diff --git a/gcc/testsuite/gcc.target/i386/harden-sls-6.c b/gcc/testsuite/gcc.target/i386/harden-sls-6.c
|
|
|
d8f365 |
new file mode 100644
|
|
|
d8f365 |
index 00000000000..9068eb64008
|
|
|
d8f365 |
--- /dev/null
|
|
|
d8f365 |
+++ b/gcc/testsuite/gcc.target/i386/harden-sls-6.c
|
|
|
d8f365 |
@@ -0,0 +1,18 @@
|
|
|
d8f365 |
+/* { dg-do compile { target { ! ia32 } } } */
|
|
|
d8f365 |
+/* { dg-options "-O2 -fcf-protection -mharden-sls=indirect-jmp" } */
|
|
|
d8f365 |
+
|
|
|
d8f365 |
+struct _Unwind_Context _Unwind_Resume_or_Rethrow_this_context;
|
|
|
d8f365 |
+
|
|
|
d8f365 |
+void offset (int);
|
|
|
d8f365 |
+
|
|
|
d8f365 |
+struct _Unwind_Context {
|
|
|
d8f365 |
+ void *reg[7];
|
|
|
d8f365 |
+} _Unwind_Resume_or_Rethrow() {
|
|
|
d8f365 |
+ struct _Unwind_Context cur_contextcur_context =
|
|
|
d8f365 |
+ _Unwind_Resume_or_Rethrow_this_context;
|
|
|
d8f365 |
+ offset(0);
|
|
|
d8f365 |
+ __builtin_eh_return ((long) offset, 0);
|
|
|
d8f365 |
+}
|
|
|
d8f365 |
+
|
|
|
d8f365 |
+/* { dg-final { scan-assembler "jmp\[ \t\]+\\*%rcx" } } */
|
|
|
d8f365 |
+/* { dg-final { scan-assembler-times "int3" 1 } } */
|
|
|
d8f365 |
--
|
|
|
d8f365 |
2.36.1
|
|
|
d8f365 |
|