Arm64 live patching

on YouTube ↗30m

" summary

Status: Arm64 kernel live patching is blocked by lack of reliable stack unwinding across exception boundaries despite extensive prerequisite work: implemented XT fixups out of line, patchable function entry support, and ftrace/kprobes adjustments on arm64 and x86. Plan uses compiler-emitted CFI/S-frame metadata rather than binary reverse engineering; handwritten assembly gets explicit annotations. Remaining items: fix ftrace kretprobe trampoline windows, pass richer arch stack-walk callbacks, handle no-return frames (proposal: trap after call), and prototype s_frame metadata (~3.5 MB).

AI-written summary · about

" chapters (8)

1. 0:00Introduction to live patching
2. 1:50Reliable stack trace challenges
3. 4:18Exception boundaries complexity
4. 7:51Metadata vs compiler generation
5. 11:22S frame vs dwarf comparison
6. 15:19S frame sufficiency debate
7. 16:22Prerequisites and near-term goals
8. 21:27Q&A on unwind hints