summaryrefslogtreecommitdiff
path: root/clang/docs/ControlFlowIntegrity.rst
diff options
context:
space:
mode:
authorSami Tolvanen <samitolvanen@google.com>2022-08-24 19:26:05 +0000
committerSami Tolvanen <samitolvanen@google.com>2022-08-24 19:30:13 +0000
commita79060e275440ccd8d403d5af5fb5b9395ea3fac (patch)
tree7d29f75ff6c6a0cd2ceba3945e7d7cc0951c1d79 /clang/docs/ControlFlowIntegrity.rst
parentdda38786534af733786c681e0c47b863e0626a0e (diff)
Revert "KCFI sanitizer"
This reverts commit 67504c95494ff05be2a613129110c9bcf17f6c13 as using PointerEmbeddedInt to store 32 bits breaks 32-bit arm builds.
Diffstat (limited to 'clang/docs/ControlFlowIntegrity.rst')
-rw-r--r--clang/docs/ControlFlowIntegrity.rst13
1 files changed, 0 insertions, 13 deletions
diff --git a/clang/docs/ControlFlowIntegrity.rst b/clang/docs/ControlFlowIntegrity.rst
index ef47b1c5b4b2..eaf870456b95 100644
--- a/clang/docs/ControlFlowIntegrity.rst
+++ b/clang/docs/ControlFlowIntegrity.rst
@@ -306,19 +306,6 @@ the identity of function pointers is maintained, and calls across shared
library boundaries are no different from calls within a single program or
shared library.
-.. _kcfi:
-
-``-fsanitize=kcfi``
--------------------
-
-This is an alternative indirect call control-flow integrity scheme designed
-for low-level system software, such as operating system kernels. Unlike
-``-fsanitize=cfi-icall``, it doesn't require ``-flto``, won't result in
-function pointers being replaced with jump table references, and never breaks
-cross-DSO function address equality. These properties make KCFI easier to
-adopt in low-level software. KCFI is limited to checking only function
-pointers, and isn't compatible with executable-only memory.
-
Member Function Pointer Call Checking
=====================================