News for hackers. Stuff that matters.
Re:Retpoline: A Branch Target Injection Mitigation [pdf] by jesup on Tuesday February 20, 2018 @11:39PM (#16426885)
"Linux, for instance, does not support arbitrary call depth and barely uses recursion." Perhaps there's context missing from that statement? Linux certainly can have arbitrarily deep call depth, depending on the stack size. Are you referring to the kernel? That would be odd, since the paper talks about application code needing to be fully recompiled with retpoline to be safe.

(Of course, that means that all libraries you link with or dynamically load have to be compiled with retpoline too.)

Re:Retpoline: A Branch Target Injection Mitigation [pdf] by hansendc on Wednesday February 21, 2018 @01:53AM (#16427433)
Yes, I was referring to the Linux kernel: it does barely uses recursion and has small stack sizes compared to normal applications.