From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from FRA01-MR2-obe.outbound.protection.outlook.com (mail-eopbgr90082.outbound.protection.outlook.com [40.107.9.82]) by sourceware.org (Postfix) with ESMTPS id 9FEA03858D35 for ; Fri, 31 Jul 2020 06:59:12 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 9FEA03858D35 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=arm.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=Szabolcs.Nagy@arm.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B3qjsf3phZLWkJq2E2ov/8rBnIzyhxQbl7VByr5s+Dc=; b=W5F6n59yCt90AXL621mw8tibjFHY4kqehbdh33mn10MNq20O52N7fsD3J/IhEDqwPnsYEJ2rMsyC8u1LEmQ2d5dFOB4Gk4QXodKU7FQT1B+tglPcYKwp7jzsWiSKzOBSHuWRMUql1bqCpS8ZpcWs4XZbkMd/0IjDplUowSxowgU= Received: from AM5PR04CA0008.eurprd04.prod.outlook.com (2603:10a6:206:1::21) by PR2PR08MB4667.eurprd08.prod.outlook.com (2603:10a6:101:1a::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.16; Fri, 31 Jul 2020 06:59:10 +0000 Received: from AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com (2603:10a6:206:1:cafe::c) by AM5PR04CA0008.outlook.office365.com (2603:10a6:206:1::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.16 via Frontend Transport; Fri, 31 Jul 2020 06:59:10 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; sourceware.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com; sourceware.org; dmarc=bestguesspass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT032.mail.protection.outlook.com (10.152.16.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.20 via Frontend Transport; Fri, 31 Jul 2020 06:59:10 +0000 Received: ("Tessian outbound c4059ed8d7bf:v62"); Fri, 31 Jul 2020 06:59:09 +0000 X-CheckRecipientChecked: true X-CR-MTA-CID: 342af1be8d24eabc X-CR-MTA-TID: 64aa7808 Received: from b91628b32901.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 84348B50-47C8-46D6-A190-4585B99DC0B8.1; Fri, 31 Jul 2020 06:59:03 +0000 Received: from EUR03-VE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id b91628b32901.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 31 Jul 2020 06:59:03 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=n6c/ykec68eN+2kDLzICEvdwHkn7L36nXevzM6iQwjAmFeq3abhtg0Fl3cQiMxcRz5aAjs+90rFhT4et1yMipbGEP5mJK5UpsuRjb7GR8/h6lfp1g2ZxybgapkjKb/R9Vyd2HA8czWp3XRqi4u/7f54bR7Q8WlUTR4R9Q1vOFypD49zgdJ3MOoDJdG7N3htkVK2z7oBkzYEtfk7zpKL5wstxJpvD4tL1u5h/FyvFh71gHYOOgEFC0K5SaRqpisLarOhMTxCgSbDYtVzDwqO5V2HenzDZzS2wN93i4LYmo0suXmTqgSUSfkxID6cV2x3aMBPEBivAQIx7NLAyiG3lQQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B3qjsf3phZLWkJq2E2ov/8rBnIzyhxQbl7VByr5s+Dc=; b=aGhotsq1+pNthDTtLgsJbRY3JS7gCukJrH56VtvRDqlDrbfN/XZkI+2ousgjMpykKwqb7EoSRQlMAAWXVxp1HCOT5irfQ/8WOA0uo2xkt1KIBCH5ZpW3TrSq39DB9DxhXlvAs+quzjMtjw3M6JWU5SXab7ohCTWas0TTk4ei2aUh452DsY9ik1DZmmWaR18rVm8eAqz4H3eqRp5myzE6yDsOvu6bzmvYgSqNTvGT2Pu0cdN9uDCqgAjYrGrN4AuvTEm2TeE+5RoGV39nQVjVod0FxKy86zbwJw00Ukhe0/yRwxRLXB82Ed3qZSB+kUpdDl347HM5q3Vh5JOkml0e1A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B3qjsf3phZLWkJq2E2ov/8rBnIzyhxQbl7VByr5s+Dc=; b=W5F6n59yCt90AXL621mw8tibjFHY4kqehbdh33mn10MNq20O52N7fsD3J/IhEDqwPnsYEJ2rMsyC8u1LEmQ2d5dFOB4Gk4QXodKU7FQT1B+tglPcYKwp7jzsWiSKzOBSHuWRMUql1bqCpS8ZpcWs4XZbkMd/0IjDplUowSxowgU= Authentication-Results-Original: redhat.com; dkim=none (message not signed) header.d=none;redhat.com; dmarc=none action=none header.from=arm.com; Received: from AM6PR08MB3047.eurprd08.prod.outlook.com (2603:10a6:209:4c::23) by AM6PR08MB4659.eurprd08.prod.outlook.com (2603:10a6:20b:ca::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.20; Fri, 31 Jul 2020 06:59:01 +0000 Received: from AM6PR08MB3047.eurprd08.prod.outlook.com ([fe80::2404:de9f:78c0:313c]) by AM6PR08MB3047.eurprd08.prod.outlook.com ([fe80::2404:de9f:78c0:313c%6]) with mapi id 15.20.3239.020; Fri, 31 Jul 2020 06:59:01 +0000 Date: Fri, 31 Jul 2020 07:58:59 +0100 From: Szabolcs Nagy To: Florian Weimer , Carlos O'Donell Cc: Jakub Jelinek , libc-alpha@sourceware.org, jeremy.linton@arm.com Subject: Re: [PATCH] aarch64: update NEWS about branch protection Message-ID: <20200731065856.GG24636@arm.com> References: <20200729080850.26078-1-szabolcs.nagy@arm.com> <87bljyspte.fsf@oldenburg2.str.redhat.com> <20200729084930.GS7127@arm.com> <87lfj2r8z4.fsf@oldenburg2.str.redhat.com> <20200729091734.GT7127@arm.com> Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20200729091734.GT7127@arm.com> User-Agent: Mutt/1.9.4 (2018-02-28) X-ClientProxiedBy: LO2P265CA0116.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:c::32) To AM6PR08MB3047.eurprd08.prod.outlook.com (2603:10a6:209:4c::23) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 Received: from arm.com (217.140.106.55) by LO2P265CA0116.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:c::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3239.20 via Frontend Transport; Fri, 31 Jul 2020 06:59:01 +0000 X-Originating-IP: [217.140.106.55] X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-HT: Tenant X-MS-Office365-Filtering-Correlation-Id: 6763c407-b775-4a90-9d33-08d8351f39b9 X-MS-TrafficTypeDiagnostic: AM6PR08MB4659:|PR2PR08MB4667: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true NoDisclaimer: true X-MS-Oob-TLC-OOBClassifiers: OLM:8273;OLM:8273; X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: hAn8zdMLwnlmbHqsdKXowHoQfM1qz9uZxL8tKgxXC6YNaewxIZtabCdJmCbMhmpCZsf/WOX9Bo5nTTTVZu3z5LVVzhEB8x5pjpkm/enQ/xzwrjBGIJ9kiPThedqKSBX6Au74TVpYyUpygkQVVqdieJmbnwUsJo6jomdfO/fXkkMkM1H+6FmnW7AiAUm20Jqr940pjyD3967riZ+6UhDignNGU7lXbvjgvorid/psrd05wvlekWd3J5skHAEjYCws8YYRZRo38mvblBqVfhzCrlMiZ1oRlRGysbZBX43RKe/87P7C0w2x9nUc/wJW0Wi9MMPuR0eb7/gu3gwxTUbazg== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB3047.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(366004)(376002)(39860400002)(346002)(396003)(136003)(8936002)(5660300002)(8676002)(478600001)(55016002)(4326008)(83380400001)(66556008)(33656002)(86362001)(2616005)(956004)(66946007)(316002)(15650500001)(110136005)(186003)(44832011)(7696005)(26005)(66476007)(1076003)(36756003)(2906002)(8886007)(16526019)(52116002); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData: 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 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4659 Original-Authentication-Results: redhat.com; dkim=none (message not signed) header.d=none;redhat.com; dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com X-MS-Office365-Filtering-Correlation-Id-Prvs: b0bd91fd-35a0-406d-1341-08d8351f3466 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: Ix0+4bylyoiKVvM6NV9dnZKVyUpnDaehYtjhMXcZrOPAiZlczXG88DrR0aeo7RBkNA0mar+HXr4YQm6w9bosxhKw0K07R5Cwja49qq6+TpgT7gUt62S3HBBEM1+6t6gGaaG/i0NG/NAPXA9R4zNNipD83YDbZaeEp2WWD/hXPuU1g9XtNYO7SZr7aibb153hoF2dKqqjh9qSg6inCZ89jKj1ui3ZYSwWFISZPKqntuFzter2ohb3CEx7XGJrXmL8dopBVLyakBIibUReku3qgPsO5wDKTzrvidMnAfMGnUh5WyvM6g2zT1q6CZwXbHxeVObEEaXULJn0KzOG+AvS2SGkHhXF4pe4M0Hp6KwZ7jokZJxrPjLje4YCqwkzrNWNVzSK476dDeC8E3iW7E/J1Q== X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFTY:; SFS:(4636009)(376002)(39860400002)(346002)(396003)(136003)(46966005)(336012)(70206006)(1076003)(16526019)(26005)(186003)(33656002)(70586007)(47076004)(36906005)(5660300002)(82740400003)(83380400001)(356005)(316002)(82310400002)(81166007)(110136005)(478600001)(2616005)(956004)(44832011)(36756003)(8886007)(2906002)(7696005)(15650500001)(4326008)(55016002)(8676002)(86362001)(8936002); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Jul 2020 06:59:10.1099 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 6763c407-b775-4a90-9d33-08d8351f39b9 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR2PR08MB4667 X-Spam-Status: No, score=-15.0 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, GIT_PATCH_0, MSGID_FROM_MTA_HEADER, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2, SPF_HELO_PASS, SPF_PASS, TXREP, UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 31 Jul 2020 06:59:14 -0000 The 07/29/2020 10:17, Szabolcs Nagy wrote: > The 07/29/2020 11:01, Florian Weimer wrote: > > * Szabolcs Nagy: > > > The 07/29/2020 10:11, Florian Weimer wrote: > > >> * Szabolcs Nagy: > > >> > diff --git a/NEWS b/NEWS > > >> > index 1ef4a0a7a4..0e6ad5edc4 100644 > > >> > --- a/NEWS > > >> > +++ b/NEWS > > >> > @@ -70,7 +70,9 @@ Major new features: > > >> > > > >> > * AArch64 now supports standard branch protection security hardening > > >> > in glibc when it is built with a GCC that is configured with > > >> > - --enable-standard-branch-protection. This includes branch target > > >> > + --enable-standard-branch-protection (or if -mbranch-protection=standard > > >> > + flag is passed when building both GCC target libraries and glibc, > > >> > + in either case a custom GCC is needed). This includes branch target > > >> > identification (BTI) and pointer authentication for return addresses > > >> > (PAC-RET). They require armv8.5-a and armv8.3-a architecture > > >> > extensions respectively for the protection to be effective, > > >> > > >> Please clarify if you need to pass the flags in CFLAGS or CC for glibc. > > >> Thanks. > > > > > > cflags is enough, but it is hard to tell what > > > the glibc build system does with the various > > > cflags. > > > > > > if i simply override CFLAGS i get > > > # error "glibc cannot be compiled without optimization" > > > > Okay, I trust you that CFLAGS is enough. ... > > My RM delegation has already expired, so I cannot approve your patch. > > ok. ping.