LKML Archive on lore.kernel.org
help / color / mirror / Atom feed
* [x86.git#mm] stack protector fixes, vmsplice exploit
@ 2008-02-14 17:00 Ingo Molnar
  2008-02-14 17:16 ` pageexec
  0 siblings, 1 reply; 11+ messages in thread
From: Ingo Molnar @ 2008-02-14 17:00 UTC (permalink / raw)
  To: pageexec
  Cc: Sam Ravnborg, Arjan van de Ven, linux-kernel, torvalds,
	Thomas Gleixner, H. Peter Anvin


update: latest x86.git#mm has a pretty much working stack-protector 
feature - you can pick it up for testing via:

   http://people.redhat.com/mingo/x86.git/README

as pageexec@freemail.hu has indicated it already in his analysis and 
patch, there were multiple bugs hitting us here. The amount and scope of 
these problems show structural problems in how security in this area was 
approached. So with these changes we try to go deeper than just 
minimally fixing the feature. We've got 15 changes so far in and around 
this area:

  x86: fix execve with -fstack-protect
  x86: exclude vsyscall files from stackprotect
  x86: fix stackprotect Makefile rule
  x86: fix stackprotector canary updates during context switches
  panic: print more informative messages on stackprotect failure
  panic: print out stacktrace if DEBUG_BUGVERBOSE
  x86: enable stack-protector by default
  x86: setup stack canary for the idle threads
  x86: fix canary of the boot CPU's idle task
  stackprotector: include files
  stackprotector: add boot_init_stack_canary()
  x86: fix the stackprotector canary of the boot CPU
  x86: stackprotector: mix TSC to the boot canary
  x86: test the presence of the stackprotector
  x86: streamline stackprotector

but we've not completed this work yet. We'll push the independent bits 
to Linus ASAP.

	Ingo

^ permalink raw reply	[flat|nested] 11+ messages in thread

end of thread, other threads:[~2008-02-14 23:19 UTC | newest]

Thread overview: 11+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-02-14 17:00 [x86.git#mm] stack protector fixes, vmsplice exploit Ingo Molnar
2008-02-14 17:16 ` pageexec
2008-02-14 19:00   ` Ingo Molnar
2008-02-14 18:55     ` pageexec
2008-02-14 20:25       ` Ingo Molnar
2008-02-14 21:00         ` Arjan van de Ven
2008-02-14 21:12         ` pageexec
2008-02-14 22:35         ` Jakub Jelinek
2008-02-14 21:43           ` pageexec
2008-02-14 23:19             ` Ingo Molnar
2008-02-14 23:16           ` Ingo Molnar

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).