Re: [PATCH] i386: Properly pop restore token in signal frame

2020-02-09 Thread Uros Bizjak
On Sat, Feb 8, 2020 at 2:43 PM H.J. Lu wrote: > > Linux CET kernel places a restore token on shadow stack for signal > handler to enhance security. The restore token is 8 byte and aligned > to 8 bytes. It is usually transparent to user programs since kernel > will pop the restore token when sign

[PATCH] i386: Properly pop restore token in signal frame

2020-02-08 Thread H.J. Lu
Linux CET kernel places a restore token on shadow stack for signal handler to enhance security. The restore token is 8 byte and aligned to 8 bytes. It is usually transparent to user programs since kernel will pop the restore token when signal handler returns. But when an exception is thrown from