Linux kCFI/FineIBT Weaknesses Addressed By Rewriting Some Assembly In C

[phoronix]

Phoronix: Linux kCFI/FineIBT Weaknesses Addressed By Rewriting Some Assembly In C

Ahead of the Linux 6.5-rc2 release tomorrow there was a set of x86/x86_64 kernel changes merged overnight to deal with some weaknesses in the kernel's Control Flow Integrity (kCFI) / FineIBT (Indirect Branch Tracking) code...

https://www.phoronix.com/news/Linux-kCFI-FineIBT-Weaknesses

[ddriver]

Not Rust? Outrage!

[ClosedSource]

Not Rust? Outrage!

The Torvalds only understands C (and Makefiles).

[cl333r]

The Torvalds only understands C (and Makefiles).

imho Makefiles are even worse than C, bcoz C is just old and Makefiles are downright disgusting.

[ClosedSource]

imho Makefiles are even worse than C, bcoz C is just old and Makefiles are downright disgusting.

Well, build.ninja files aren't better but meson makes it easy to generate them.

[JEBjames]

Michael

typo/grammar

"attacks on kernel" maybe "attacks on the kernel"?

[Jabberwocky]

imho Makefiles are even worse than C, bcoz C is just old and Makefiles are downright disgusting.

What would you suggest with the same features and cross-platform support?

I recently decided rewrite this from scratch for a cross-platform & cross-language build system.

* https://github.com/enspirit/makefile...aster/Makefile

It isn't very readable, but it runs everywhere and offers flexibility to develop, test, vulnerability scan, deploy, N-projects from a single script.

$(foreach component,$(DOCKER_COMPONENTS),$(eval $(call make-image-rules,$(component),$(component)/Dockerfile,$(component))))

If there's something out there that has a better syntax I'll be happy to try test it.

[cl333r]

What would you suggest with the same features and cross-platform support?

I recently decided rewrite this from scratch for a cross-platform & cross-language build system.

* https://github.com/enspirit/makefile...aster/Makefile

It isn't very readable, but it runs everywhere and offers flexibility to develop, test, vulnerability scan, deploy, N-projects from a single script.

$(foreach component,$(DOCKER_COMPONENTS),$(eval $(call make-image-rules,$(component),$(component)/Dockerfile,$(component))))

If there's something out there that has a better syntax I'll be happy to try test it.

wtf are you even doing, do you really expect anyone to do that for you just to answer your question? I'd rather shave my hazelnuts.

[NotMine999]

Not Rust? Outrage!

I'll presume you are were being sarcastic?

This is a programming logic error not a memory leak issue (or whatever type of memory issues Rust solves).

"I am not a Rust programmer nor do I play one on TV."

[darkonix]

I'll presume you are were being sarcastic?

I cannot say. My sarcasm-meter just exploded for some reason...