Intel CET With Indirect Branch Tracking & Shadow Stack Land In Glibc

[phoronix]

Phoronix: Intel CET With Indirect Branch Tracking & Shadow Stack Land In Glibc

Landing yesterday in Glibc for Intel's Control-flow Enforcement Technology (CET) were the instructions for Indirect Branch Tracking (IBT) and Shadow Stack (SHSTK)...

http://www.phoronix.com/scan.php?page=news_item&px=Intel-CET-IBT-SHSTK-glibc

[ksec]

Any one knows if these are needed for muslc? Glibc is already bloated as it is....

[M@yeulC]

Any one knows if these are needed for muslc? Glibc is already bloated as it is....

What does Glibc have to do with music?

You can always use musl if you think glibc is bloated, but I don't often hear that claim.

The way I understand it, those features could reinforce security quite a bit, as you would need to corrupt more of a program (trough buffer overflows, for instance) before being able to execute arbitrary code. However, this seems like it only prevents a small range of attacks, and would probably make programs run slower? (Since the expected addresses are to be passed around as well)

[tildearrow]

Typo:

The Control-flow Enforcement Technolgoy behavior

[xorbe]

Looking forward to the performance impact benchmarks.