RDSSPD/RDSSPQ—Read Shadow Stack Pointer

Opcode/Instruction Op/En 64/32 bit Mode Support CPUID Feature Flag Description
F3 0F 1E /1 (mod=11) RDSSPD r32 R V/V CET_SS Copy low 32 bits of shadow stack pointer (SSP) to r32.
F3 REX.W 0F 1E /1 (mod=11) RDSSPQ r64 R V/N.E. CET_SS Copies shadow stack pointer (SSP) to r64.

Instruction Operand Encoding

Op/En Operand 1 Operand 2 Operand 3 Operand 4
R ModRM:r/m (w) N/A N/A N/A

Description

Copies the current shadow stack pointer (SSP) register to the register destination. This opcode is a NOP when CET shadow stacks are not enabled and on processors that do not support CET.

Operation

IF CPL = 3
    IF CR4.CET & IA32_U_CET.SH_STK_EN
         IF (operand size is 64 bit)
              THEN
                    Dest := SSP;
              ELSE
                    Dest := SSP[31:0];
         FI;
    FI;
ELSE
    IF CR4.CET & IA32_S_CET.SH_STK_EN
         IF (operand size is 64 bit)
              THEN
                    Dest := SSP;
              ELSE
                    Dest := SSP[31:0];
         FI;
    FI;
FI;

Flags Affected

None.

C/C++ Compiler Intrinsic Equivalent

RDSSPD__int32 _rdsspd_i32(void);

RDSSPQ__int64 _rdsspq_i64(void);

Protected Mode Exceptions

None.

Real-Address Mode Exceptions

None.

Virtual-8086 Mode Exceptions

None.

Compatibility Mode Exceptions

None.

64-Bit Mode Exceptions

None.