lea noop

Posted Mar 10, 2025 2:56 UTC (Mon) by jandryuk (subscriber, #103122)
In reply to: lea noop by ushankar
Parent article: A hole in FineIBT protection

I think, yes, lea subtracts 0x10. r11 had the address of func, and __cfi_func is at -0x10. That is the location of the endbr instruction needed for IBT.

https://elixir.bootlin.com/linux/v6.14-rc5/source/arch/x8...