Control-flow Enforcement for indirect branch (CET IBT)

Aynı teknik/mekanizma (Intel CET Indirect Branch Tracking): bkz. canonical not.

Mechanism

Bu, Intel CET'in forward-edge yarısı olan Indirect Branch Tracking'in (ENDBR landing pad + #CP fault) aynısıdır. Tam mekanizma — tracker state machine, ENDBR_EN/ NO_TRACK_EN MSR kontrolleri, objtool sealing — canonical not'ta: Intel CET Indirect Branch Tracking.

Walkthrough

Tam walkthrough canonical not'ta: Intel CET Indirect Branch Tracking.

References

• A Technical Look at Intel's Control-flow Enforcement Technology (Intel)
• Understanding Hardware-enforced Stack Protection (Microsoft)