Skip to content

Commit

Permalink
Soft-deprecate GNU_PROPERTY_AARCH64_FEATURE_1_PAC
Browse files Browse the repository at this point in the history
Users should not rely on this property to enquire about the status
of the protection of an ELF file. If it is present, then yes, the
file has been protected. If it is not present, it can still have
been protected to some extent.

The comment on Custom PLT protection has also been removed. This
protection is seen as a separate feature to PAC-ret, since you could
ask the linker to generate protected PLTs regardless of the presence
of PAC-ret.
  • Loading branch information
pbarrio committed Dec 3, 2021
1 parent 320a569 commit b80e9ed
Showing 1 changed file with 6 additions and 4 deletions.
10 changes: 6 additions & 4 deletions aaelf64/aaelf64.rst
Original file line number Diff line number Diff line change
Expand Up @@ -1700,10 +1700,12 @@ sections are compatible with Branch Target Identification mechanism. An
executable or shared object with this bit set is required to generate
`Custom PLTs`_ with BTI instruction.

``GNU_PROPERTY_AARCH64_FEATURE_1_PAC`` This indicates that all executable
sections have Return Address Signing enabled. An executable or shared object
with this bit set can generate `Custom PLTs`_ with a PAC
instruction.
``GNU_PROPERTY_AARCH64_FEATURE_1_PAC`` This indicates that all
executable sections have been protected with Return Address Signing.
Its use is optional, meaning that an ELF file where this flag is unset
can still have Return Address signing enabled in some of or all its
executable sections. If used, this flag simplifies the task of
checking if an ELF file has been fully protected with Return Address Signing.”

Program Loading
---------------
Expand Down

0 comments on commit b80e9ed

Please sign in to comment.