openssl/openssl

Arm assembler is missing GCS tags

Open

#27,712 创建于 2025年5月28日

在 GitHub 查看
 (0 评论) (0 反应) (0 负责人)C (11,262 fork)batch import
branch: masterhelp wantedtriaged: feature

仓库指标

Star
 (30,157 star)
PR 合并指标
 (30 天内没有已合并 PR)

描述

OpenSSL has some Arm-optimised assembler code that has PAC and BTI hints but not GCS. This assembler should be verified that it is GCS-safe and tagged as such.

In most cases this results in any code that was intended to be GCS-enabled but links to libssl or libcrypto being not GCS-enabled. Also, systemd can link against libcrypto and passes --fatal-warnings to the linker, so the combination of GCS + OpenSSL + systemd results in build failures:

libcrypto.so: warning: GCS is required by -z gcs, but this shared library lacks the necessary property note. The dynamic loader might not enable GCS or refuse to load the program unless all the shared library dependencies have the GCS marking.
collect2: error: ld returned 1 exit status

贡献者指南