=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/innovations.html,v retrieving revision 1.111 retrieving revision 1.112 diff -u -r1.111 -r1.112 --- www/innovations.html 2023/03/15 16:49:49 1.111 +++ www/innovations.html 2023/07/13 14:02:00 1.112 @@ -243,6 +243,9 @@
  • ld.so and crt0 register the location of the execve(2) stub with the kernel using pinsyscall(2), after which the kernel only accepts an execve call from that specific location. Theo de Raadt, Feb 2023. +
  • Mandatory enforcement of indirect branch targets (BTI on arm64, + IBT on Intel amd64), unless a linker flag (-Wl,-z,nobtcfi) requests + no enforcement.

    Functions