Skip to content
master
Switch branches/tags
Go to file
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 

Load Value Injection Optimization Plugin for LLVM* Project

*Other names and brands may be claimed as the property of others.

A document describing this mitigation can be found here:

https://software.intel.com/security-software-guidance/insights/optimized-mitigation-approach-load-value-injection

Prerequisites

The LVI optimizing plugin has the following dependencies:

  • CMake
  • SYMPHONY (version 3)

For example, for Ubuntu 16.04+

$ apt install cmake coinor-libsymphony-dev

Build and Install

To obtain and build the plugin:

$ git clone https://github.com/intel/lvi-llvm-optimization-plugin.git
$ cd lvi-llvm-optimization-plugin
$ mkdir build
$ cd build
$ cmake -DCMAKE_BUILD_TYPE=RELEASE ..
$ make

(Optional) installation:

$ sudo make install

Usage

This plugin is intended to be used with LLVM/clang LVI load hardening, for example:

$ clang -O3 -lvi-hardening my_file.c \
    -mllvm -x86-lvi-load-opt-plugin=<path-to-plugin-install>/OptimizeCut.so

At the time of this writing, the patch that enables LVI load hardening can be found here: https://reviews.llvm.org/D75938.

Debugging

When using a DEBUG build (i.e., CMAKE_BUILD_TYPE=DEBUG), this plugin emits detailed information about the optimizations it is performing.

About

Load Value Injection Optimization Plugin for LLVM* Project

Resources

License

Releases

No releases published

Packages

No packages published