About

Shadow stacks are a security feature meant to detect/prevent classes of attacks where a malicious actor has gained control over a function's return pointer.  Shadow stack mechanisms typically need a combination of compiler, library, dynamic loader and kernel support, they often require special support for JITs as well.  This work item is only tracking the core LLVM functionality needed to support shadow stacks.  Shadow stacks are seen as a blocking issue for Android on RISC-V.

...

• Implemented the linking policy for Zicfiss and Zicfilp in LLD. The draft can be found here: https://github.com/SuHo-llrr/llvm-project/pull/1/commits
  The patch set also includes the emission of ELF .note.gnu.property section and llvm-readobj changes to display the content of the section.
  There Since there are ongoing discussions on the linking policy, and we will update the implementation when the decision is made.
  Besides, we will also add test cases for upstreaming.

...