Usekelo lokuhlola lokwakha kabusha i-Linux kernel e-Clang ngomshini wokuvikela we-CFI

U-Kees Cook, owayeyinhloko ye-sysadmin ye-kernel.org kanye nomholi weThimba Lezokuphepha le-Ubuntu, manje osebenza kwa-Google ukuvikela i-Android ne-ChromeOS, ilungisiwe okokuhlola inqolobane enamapeshi akuvumela ukuthi wakhe i-kernel ye-architecture ye-x86_64 usebenzisa i-Clang compiler futhi uvule indlela yokuvikela ye-CFI (Control Flow Integrity). I-CFI inikeza ukutholwa kwezinhlobo ezithile zokuziphatha okungachazwanga okungase kuholele ekuphazamisekeni kokulawula okuvamile ngenxa yezenzo zokuxhaphaza.

Ake sikukhumbule lokho LLVM 9 izinguquko ezidingekayo ukuze kwakhiwe i-Linux kernel usebenzisa i-Clang kumasistimu we-x86_64 zifakiwe. Amaphrojekthi we-Android ne-ChromeOS asevele akhona faka isicelo I-Clang yokwakha i-kernel futhi i-Google ihlola i-Clang njengenkundla enkulu yokwakha izinhlamvu zezinhlelo zayo ze-Linux zokukhiqiza. Izinhlobonhlobo ze-Kernel ezakhiwe kusetshenziswa i-Clang nazo zithuthukisa amaphrojekthi ULinaro ΠΈ CROS.

Source: opennet.ru

Engeza amazwana