Google's Pixel 3 is the first Android device to ship with new CFI kernel protections

[silversurfer]

In a blog post today, Google said the entire Android kernel is now protected by CFI, and specifically, by "forward-edge Control Flow Integrity (CFI)," as implemented by the LLVM compiler, which Google uses to compile the Android OS kernel.

"Google's Pixel 3 will be the first Android device to ship with these protections, and we have made the feature available to all device vendors through the Android common kernel," said Sami Tolvanen, Staff Software Engineer, Android Security.

Source: https://www.zdnet.com/article/googles-pi...otections/