endbr64

Creator
Creator
Seonglae ChoSeonglae Cho
Created
Created
2024 Jun 9 7:36
Editor
Edited
Edited
2025 Oct 28 11:7
Refs
Refs
A protection mechanism introduced to prevent attacks that cause abnormal stack behavior such as ROP/JOP. It compiles code to ensure that endbr32/endbr64 instructions must appear after JMP or CALL instructions, otherwise an error occurs. On CPUs that do not support this protection mechanism, it is interpreted as NOP.

Indirect branch tracking (IBT), branch target identification (BTI)

IBT is designed to protect against exploits that use indirect branch instructions to jump into code in unintended ways like
Return-oriented programming
 
 
 
 
 
 

Recommendations