Skip to content

Arm assembler is missing GCS tags #27712

@rossburton

Description

@rossburton

OpenSSL has some Arm-optimised assembler code that has PAC and BTI hints but not GCS. This assembler should be verified that it is GCS-safe and tagged as such.

In most cases this results in any code that was intended to be GCS-enabled but links to libssl or libcrypto being not GCS-enabled. Also, systemd can link against libcrypto and passes --fatal-warnings to the linker, so the combination of GCS + OpenSSL + systemd results in build failures:

libcrypto.so: warning: GCS is required by -z gcs, but this shared library lacks the necessary property note. The dynamic loader might not enable GCS or refuse to load the program unless all the shared library dependencies have the GCS marking.
collect2: error: ld returned 1 exit status

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions