On Wed, 2025-03-19 at 08:47 -0700, Josh Poimboeuf wrote: > > Looking at machine_kexec(), it calls cet_disable() before the indirect > call. So yeah, it seems fine for relocate_kernel() to not have a CFI > prologue or ENDBR.
Yeah. I'm just going to throw that into a branch and forget it for now. It's just causing noise around the *actual* stuff we want to get in, to do the exception handling. For that, I think the only thing outstanding is to add a userspace test based on http://david.woodhou.se/loadret.c which invokes the int3 from the 'payload' to test it. I think this is better than doing it inside the kernel itself, as it gives us a selftest for the kexec jump mechanism too.
smime.p7s
Description: S/MIME cryptographic signature
