[RFC] X86 Load Value Injection (LVI) load hardening patches soon to be merged

Project Infrastructure LLVM Dev List Archives
1

https://reviews.llvm.org/D75936

and

https://reviews.llvm.org/D75937

provide an optimization to mitigate LVI vulnerabilities in SGX enclave code. The optimizations are described in more detail here:

https://software.intel.com/security-software-guidance/insights/optimized-mitigation-approach-load-value-injection

A plugin that uses a Mixed Integer-Linear Programming (MILP) solver to achieve an optimal mitigation can be found here:

https://github.com/intel/lvi-llvm-optimization-plugin

We plan to merge the passes soon. Reviews and feedback welcome.

Thanks and Regards,

Scott Constable