diff --git a/clang/docs/SafeStack.rst b/clang/docs/SafeStack.rst index 8b5557bf59b050..c585315dff882a 100644 --- a/clang/docs/SafeStack.rst +++ b/clang/docs/SafeStack.rst @@ -18,7 +18,7 @@ buffer overflows on the unsafe stack cannot be used to overwrite anything on the safe stack. SafeStack is a part of the `Code-Pointer Integrity (CPI) Project -`_. +`_. Performance ----------- @@ -84,7 +84,7 @@ Known security limitations A complete protection against control-flow hijack attacks requires combining SafeStack with another mechanism that enforces the integrity of code pointers that are stored on the heap or the unsafe stack, such as `CPI -`_, or a forward-edge control flow integrity +`_, or a forward-edge control flow integrity mechanism that enforces correct calling conventions at indirect call sites, such as `IFCC `_ with arity checks. Clang has control-flow integrity protection scheme for :doc:`C++ virtual @@ -186,7 +186,7 @@ Deprecated: This builtin function is an alias for Design ====== -Please refer to the `Code-Pointer Integrity `__ +Please refer to the `Code-Pointer Integrity `__ project page for more information about the design of the SafeStack and its related technologies.