[all-commits] [llvm/llvm-project] 9d9085: [LFI][X86] Add control-flow rewrites (#210913)

[Zachary Yedidia via All-commits]

  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 9d90850fe6b01d877a7d7559a097fd4e785b4f5a
      https://github.com/llvm/llvm-project/commit/9d90850fe6b01d877a7d7559a097fd4e785b4f5a
  Author: Zachary Yedidia <zyedidia at gmail.com>
  Date:   2026-09-24 (Thu, 24 Sep 2026)

  Changed paths:
    M llvm/docs/LFI.md
    M llvm/lib/Target/X86/CMakeLists.txt
    M llvm/lib/Target/X86/MCTargetDesc/X86MCLFIRewriter.cpp
    M llvm/lib/Target/X86/MCTargetDesc/X86MCLFIRewriter.h
    M llvm/lib/Target/X86/X86.h
    M llvm/lib/Target/X86/X86CodeGenPassBuilder.cpp
    A llvm/lib/Target/X86/X86LFIRewritePass.cpp
    M llvm/lib/Target/X86/X86PassRegistry.def
    M llvm/lib/Target/X86/X86TargetMachine.cpp
    A llvm/test/CodeGen/X86/lfi-align.ll
    A llvm/test/MC/X86/LFI/control-flow-errors.s
    A llvm/test/MC/X86/LFI/control-flow.s

  Log Message:
  -----------
  [LFI][X86] Add control-flow rewrites (#210913)

This adds LFI rewrites for control-flow operations. All jumps and
calls are rewritten so that their target is both guaranteed to be within
the sandbox, and at an address that is a multiple of the bundle size.
When combined with bundling, this restricts control-flow to the sandbox
region.

With Intel MPK support, this can provide a complete sandbox. A future
patch will also introduce software-based memory sandboxing so that MPK
is not required for memory isolation.



To unsubscribe from these emails, change your notification settings at https://github.com/llvm/llvm-project/settings/notifications