3 ms·
Interesting. But the inevitable question, wouldn't the performance suffer because of the additional integrity check for every function call in the kernel?
by aloknnikhil 7y ago
Interesting. But the inevitable question, wouldn't the performance suffer because of the additional integrity check for every function call in the kernel?
- cbsks 7y ago"There is sometimes a bit of a performance hit from doing the validation, he said, but it is "not terrible"." LWN has a good article about this presentation: https://lwn.net/SubscriberLink/810077/ee9afb4cb5991cdf/ https://lwn.net/SubscriberLink/810077/ee9afb4cb5991cdf/
- viraptor 7y agoIt's not every function calls. Just the indirect ones. There's potential for the return pointer authentication in every function, but that's likely to be limited by default. Just like you can turn on stack protection only when there are local stack buffers being used in the function.