From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-yb1-xb32.google.com (mail-yb1-xb32.google.com [IPv6:2607:f8b0:4864:20::b32]) by sourceware.org (Postfix) with ESMTPS id 63B1D3858D20 for ; Wed, 12 Jul 2023 07:27:32 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 63B1D3858D20 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=gmail.com Received: by mail-yb1-xb32.google.com with SMTP id 3f1490d57ef6-c6e4d4c59bcso656115276.1 for ; Wed, 12 Jul 2023 00:27:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1689146852; x=1691738852; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=0zgnN98LjonNBbENhRjT+/Oz5ATLRgTLlylgG7wIUKg=; b=QlNq9Z+j17z+8JWEOSd4vlAQTCml1B4TE95XZ4FYXUeBqfECAn8N1rD3qaIiBbg1th ChAnnyLb6Q4mxKxGOITbbGJDphkGzCSHwGH1BXCE0haP7XCqG6lHLX3oJliLGyXWJo46 sQvFZTdlEfBo890H0So7AvNENegYBczIJw0h+PlK0c/Z9PQYps/lyXRtl/rsxMeuAjwI Yl6utB9s5Lh9FkA1nKMkmpc36Oblp/2vhCeHa03lT6wBB1O3HFsb9AHGd0axPTM4TheX WF28pmXdhIj7yIHr7L8ocvf7DRNcvB/Lm/5/d7V2rMswxLNPqnBkn8zi6slUKKB/mNaQ hoXA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1689146852; x=1691738852; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=0zgnN98LjonNBbENhRjT+/Oz5ATLRgTLlylgG7wIUKg=; b=Mo+n2lnIQPxcq8aIalX6AfC0QmiDIDbZFFVkGGh+sgcr8dRhSOb37Z+2QOB42UnghJ iBB7FyAgp2hGk8VUjYkzUMFdEF9X2odAgGuS2KQEZ2o+4gwYJKEz+3ejPkQ8+CXyfyd+ 6m8mTRnF7xWbcCsKCjiVFLQe2o7zPdodOpvjVTIRlJ76YigYiJhHcu44aGhj7ISr4BvC QFAntTxLvIFES9kuU8uSCSLRUMTZLI5QpFQXXI8iG6u+gXpPZpJrCfMrlAMVrH9pT9tf eJnNHyM4qzG4xtGKaFNgT5Jjqs19M6fr4zhYkdmbx7JRcd9HR4/RMjzbJNNr7UGfgQud 8jow== X-Gm-Message-State: ABy/qLZxPNlRjgVrj+py7+6zH3Dcn1lDTQfVfV1iIh2hI4tp6V9rk3Nc GlFI4Q53/Hpxtn9LX54AWABvP4xUvyUpdCmCQeQ= X-Google-Smtp-Source: APBJJlEpv82nkkCPMTDCEwzj6LAA5GAPPSktqpS46JmiWaf1zhuEMJxokXzEWf8v8pJBwEXz56Xzvp9Itm6tUgHm5M8= X-Received: by 2002:a25:c541:0:b0:c75:593f:d4ab with SMTP id v62-20020a25c541000000b00c75593fd4abmr1426771ybe.22.1689146851649; Wed, 12 Jul 2023 00:27:31 -0700 (PDT) MIME-Version: 1.0 References: <20230513092042.3927038-1-hongtao.liu@intel.com> In-Reply-To: From: Hongtao Liu Date: Wed, 12 Jul 2023 15:27:20 +0800 Message-ID: Subject: Re: [PATCH V2] Provide -fcf-protection=branch,return. To: liuhongt Cc: gcc-patches@gcc.gnu.org, hjl.tools@gmail.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-7.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,GIT_PATCH_0,KAM_SHORT,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: ping. On Mon, May 22, 2023 at 4:08=E2=80=AFPM Hongtao Liu wr= ote: > > ping. > > On Sat, May 13, 2023 at 5:20=E2=80=AFPM liuhongt = wrote: > > > > > I think this could be simplified if you use either EnumSet or > > > EnumBitSet instead in common.opt for `-fcf-protection=3D`. > > > > Use EnumSet instead of EnumBitSet since CF_FULL is not power of 2. > > It is a bit tricky for sets classification, cf_branch and cf_return > > should be in different sets, but they both "conflicts" cf_full, > > cf_none. And current EnumSet don't handle this well. > > > > So in the current implementation, only cf_full,cf_none are exclusive > > to each other, but they can be combined with any cf_branch, cf_return, > > cf_check. It's not perfect, but still an improvement than original > > one. > > > > gcc/ChangeLog: > > > > * common.opt: (fcf-protection=3D): Add EnumSet attribute to > > support combination of params. > > > > gcc/testsuite/ChangeLog: > > > > * c-c++-common/fcf-protection-10.c: New test. > > * c-c++-common/fcf-protection-11.c: New test. > > * c-c++-common/fcf-protection-12.c: New test. > > * c-c++-common/fcf-protection-8.c: New test. > > * c-c++-common/fcf-protection-9.c: New test. > > * gcc.target/i386/pr89701-1.c: New test. > > * gcc.target/i386/pr89701-2.c: New test. > > * gcc.target/i386/pr89701-3.c: New test. > > --- > > gcc/common.opt | 12 ++++++------ > > gcc/testsuite/c-c++-common/fcf-protection-10.c | 2 ++ > > gcc/testsuite/c-c++-common/fcf-protection-11.c | 2 ++ > > gcc/testsuite/c-c++-common/fcf-protection-12.c | 2 ++ > > gcc/testsuite/c-c++-common/fcf-protection-8.c | 2 ++ > > gcc/testsuite/c-c++-common/fcf-protection-9.c | 2 ++ > > gcc/testsuite/gcc.target/i386/pr89701-1.c | 4 ++++ > > gcc/testsuite/gcc.target/i386/pr89701-2.c | 4 ++++ > > gcc/testsuite/gcc.target/i386/pr89701-3.c | 4 ++++ > > 9 files changed, 28 insertions(+), 6 deletions(-) > > create mode 100644 gcc/testsuite/c-c++-common/fcf-protection-10.c > > create mode 100644 gcc/testsuite/c-c++-common/fcf-protection-11.c > > create mode 100644 gcc/testsuite/c-c++-common/fcf-protection-12.c > > create mode 100644 gcc/testsuite/c-c++-common/fcf-protection-8.c > > create mode 100644 gcc/testsuite/c-c++-common/fcf-protection-9.c > > create mode 100644 gcc/testsuite/gcc.target/i386/pr89701-1.c > > create mode 100644 gcc/testsuite/gcc.target/i386/pr89701-2.c > > create mode 100644 gcc/testsuite/gcc.target/i386/pr89701-3.c > > > > diff --git a/gcc/common.opt b/gcc/common.opt > > index a28ca13385a..02f2472959a 100644 > > --- a/gcc/common.opt > > +++ b/gcc/common.opt > > @@ -1886,7 +1886,7 @@ fcf-protection > > Common RejectNegative Alias(fcf-protection=3D,full) > > > > fcf-protection=3D > > -Common Joined RejectNegative Enum(cf_protection_level) Var(flag_cf_pro= tection) Init(CF_NONE) > > +Common Joined RejectNegative Enum(cf_protection_level) EnumSet Var(fla= g_cf_protection) Init(CF_NONE) > > -fcf-protection=3D[full|branch|return|none|check] Instrument fu= nctions with checks to verify jump/call/return control-flow transfer > > instructions have valid targets. > > > > @@ -1894,19 +1894,19 @@ Enum > > Name(cf_protection_level) Type(enum cf_protection_level) UnknownError(= unknown Control-Flow Protection Level %qs) > > > > EnumValue > > -Enum(cf_protection_level) String(full) Value(CF_FULL) > > +Enum(cf_protection_level) String(full) Value(CF_FULL) Set(1) > > > > EnumValue > > -Enum(cf_protection_level) String(branch) Value(CF_BRANCH) > > +Enum(cf_protection_level) String(branch) Value(CF_BRANCH) Set(2) > > > > EnumValue > > -Enum(cf_protection_level) String(return) Value(CF_RETURN) > > +Enum(cf_protection_level) String(return) Value(CF_RETURN) Set(3) > > > > EnumValue > > -Enum(cf_protection_level) String(check) Value(CF_CHECK) > > +Enum(cf_protection_level) String(check) Value(CF_CHECK) Set(4) > > > > EnumValue > > -Enum(cf_protection_level) String(none) Value(CF_NONE) > > +Enum(cf_protection_level) String(none) Value(CF_NONE) Set(1) > > > > finstrument-functions > > Common Var(flag_instrument_function_entry_exit,1) > > diff --git a/gcc/testsuite/c-c++-common/fcf-protection-10.c b/gcc/tests= uite/c-c++-common/fcf-protection-10.c > > new file mode 100644 > > index 00000000000..b271d134e52 > > --- /dev/null > > +++ b/gcc/testsuite/c-c++-common/fcf-protection-10.c > > @@ -0,0 +1,2 @@ > > +/* { dg-do compile { target { "i?86-*-* x86_64-*-*" } } } */ > > +/* { dg-options "-fcf-protection=3Dbranch,check" } */ > > diff --git a/gcc/testsuite/c-c++-common/fcf-protection-11.c b/gcc/tests= uite/c-c++-common/fcf-protection-11.c > > new file mode 100644 > > index 00000000000..2e566350ccd > > --- /dev/null > > +++ b/gcc/testsuite/c-c++-common/fcf-protection-11.c > > @@ -0,0 +1,2 @@ > > +/* { dg-do compile { target { "i?86-*-* x86_64-*-*" } } } */ > > +/* { dg-options "-fcf-protection=3Dbranch,return" } */ > > diff --git a/gcc/testsuite/c-c++-common/fcf-protection-12.c b/gcc/tests= uite/c-c++-common/fcf-protection-12.c > > new file mode 100644 > > index 00000000000..b39c2f8e25d > > --- /dev/null > > +++ b/gcc/testsuite/c-c++-common/fcf-protection-12.c > > @@ -0,0 +1,2 @@ > > +/* { dg-do compile { target { "i?86-*-* x86_64-*-*" } } } */ > > +/* { dg-options "-fcf-protection=3Dreturn,branch" } */ > > diff --git a/gcc/testsuite/c-c++-common/fcf-protection-8.c b/gcc/testsu= ite/c-c++-common/fcf-protection-8.c > > new file mode 100644 > > index 00000000000..3b97095a92c > > --- /dev/null > > +++ b/gcc/testsuite/c-c++-common/fcf-protection-8.c > > @@ -0,0 +1,2 @@ > > +/* { dg-do compile { target { "i?86-*-* x86_64-*-*" } } } */ > > +/* { dg-options "-fcf-protection=3Dbranch,none" } */ > > diff --git a/gcc/testsuite/c-c++-common/fcf-protection-9.c b/gcc/testsu= ite/c-c++-common/fcf-protection-9.c > > new file mode 100644 > > index 00000000000..6a37e749fcb > > --- /dev/null > > +++ b/gcc/testsuite/c-c++-common/fcf-protection-9.c > > @@ -0,0 +1,2 @@ > > +/* { dg-do compile { target { "i?86-*-* x86_64-*-*" } } } */ > > +/* { dg-options "-fcf-protection=3Dbranch,full" } */ > > diff --git a/gcc/testsuite/gcc.target/i386/pr89701-1.c b/gcc/testsuite/= gcc.target/i386/pr89701-1.c > > new file mode 100644 > > index 00000000000..1879c9ab4d8 > > --- /dev/null > > +++ b/gcc/testsuite/gcc.target/i386/pr89701-1.c > > @@ -0,0 +1,4 @@ > > +/* { dg-do compile { target *-*-linux* } } */ > > +/* { dg-options "-fcf-protection=3Dbranch,return" } */ > > +/* { dg-final { scan-assembler-times ".note.gnu.property" 1 } } */ > > +/* { dg-final { scan-assembler-times ".long 0x3" 1 } } */ > > diff --git a/gcc/testsuite/gcc.target/i386/pr89701-2.c b/gcc/testsuite/= gcc.target/i386/pr89701-2.c > > new file mode 100644 > > index 00000000000..d5100575028 > > --- /dev/null > > +++ b/gcc/testsuite/gcc.target/i386/pr89701-2.c > > @@ -0,0 +1,4 @@ > > +/* { dg-do compile { target *-*-linux* } } */ > > +/* { dg-options "-fcf-protection=3Dreturn,branch" } */ > > +/* { dg-final { scan-assembler-times ".note.gnu.property" 1 } } */ > > +/* { dg-final { scan-assembler-times ".long 0x3" 1 } } */ > > diff --git a/gcc/testsuite/gcc.target/i386/pr89701-3.c b/gcc/testsuite/= gcc.target/i386/pr89701-3.c > > new file mode 100644 > > index 00000000000..88afb546fbf > > --- /dev/null > > +++ b/gcc/testsuite/gcc.target/i386/pr89701-3.c > > @@ -0,0 +1,4 @@ > > +/* { dg-do compile { target *-*-linux* } } */ > > +/* { dg-options "-fcf-protection=3Dreturn,none" } */ > > +/* { dg-final { scan-assembler-times ".note.gnu.property" 1 } } */ > > +/* { dg-final { scan-assembler-times ".long 0x2" 1 } } */ > > -- > > 2.39.1.388.g2fc9e9ca3c > > > > > -- > BR, > Hongtao --=20 BR, Hongtao