Re: Avoid speculative indirect calls in kernel

From: Jiri Kosina
Date: Wed Jan 03 2018 - 19:19:57 EST


On Wed, 3 Jan 2018, Andi Kleen wrote:

> > It should be a CPU_BUG bit as we have for the other mess. And that can be
> > used for patching.
>
> It has to be done at compile time because it requires a compiler option.

If gcc anotates indirect calls/jumps in a way that we could patch them
using alternatives in runtime, that'd be enough.

--
Jiri Kosina
SUSE Labs