[PATCH] D87717: [docs] Update ControlFlowIntegrity.rst.
Evgenii Stepanov via Phabricator via cfe-commits
cfe-commits at lists.llvm.org
Tue Sep 15 12:51:18 PDT 2020
eugenis created this revision.
eugenis added a reviewer: pcc.
Herald added a subscriber: dexonsmith.
Herald added a project: clang.
eugenis requested review of this revision.
Herald added a subscriber: aheejin.
Expand the list of targets that support cfi-icall.
Add ThinLTO everywhere LTO is mentioned. AFAIK all CFI features are
supported with ThinLTO.
Repository:
rG LLVM Github Monorepo
https://reviews.llvm.org/D87717
Files:
clang/docs/ControlFlowIntegrity.rst
Index: clang/docs/ControlFlowIntegrity.rst
===================================================================
--- clang/docs/ControlFlowIntegrity.rst
+++ clang/docs/ControlFlowIntegrity.rst
@@ -76,8 +76,8 @@
to use all schemes except for non-virtual member function call and indirect call
checking.
-Remember that you have to provide ``-flto`` if at least one CFI scheme is
-enabled.
+Remember that you have to provide ``-flto`` or ``-flto=thin`` if at
+least one CFI scheme is enabled.
Trapping and Diagnostics
========================
@@ -217,7 +217,8 @@
shared library boundaries are handled as if the callee was not compiled with
``-fsanitize=cfi-icall``.
-This scheme is currently only supported on the x86 and x86_64 architectures.
+This scheme is currently supported on a limited set of targets: x86,
+x86_64, arm, arch64 and wasm.
``-fsanitize-cfi-icall-generalize-pointers``
--------------------------------------------
@@ -368,7 +369,7 @@
Use **-f[no-]sanitize-cfi-cross-dso** to enable the cross-DSO control
flow integrity mode, which allows all CFI schemes listed above to
apply across DSO boundaries. As in the regular CFI, each DSO must be
-built with ``-flto``.
+built with ``-flto`` or ``flto=thin``.
Normally, CFI checks will only be performed for classes that have hidden LTO
visibility. With this flag enabled, the compiler will emit cross-DSO CFI
-------------- next part --------------
A non-text attachment was scrubbed...
Name: D87717.292005.patch
Type: text/x-patch
Size: 1391 bytes
Desc: not available
URL: <http://lists.llvm.org/pipermail/cfe-commits/attachments/20200915/d710a563/attachment.bin>
More information about the cfe-commits
mailing list