Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1442908

Re: [PATCH v2 01/11] mm: Implement stack frame object validation

From Kees Cook <keescook@chromium.org>
Newsgroups linux.kernel
Subject Re: [PATCH v2 01/11] mm: Implement stack frame object validation
Date 2016-07-14 00:10 +0200
Message-ID <rUAvU-Hu-15@gated-at.bofh.it> (permalink)
References <rUAmd-nH-3@gated-at.bofh.it> <rUAmj-nH-35@gated-at.bofh.it> <rUAvU-Hu-17@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Wed, Jul 13, 2016 at 3:01 PM, Andy Lutomirski <luto@amacapital.net> wrote:
> On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook <keescook@chromium.org> wrote:
>> This creates per-architecture function arch_within_stack_frames() that
>> should validate if a given object is contained by a kernel stack frame.
>> Initial implementation is on x86.
>>
>> This is based on code from PaX.
>>
>
> This, along with Josh's livepatch work, are two examples of unwinders
> that matter for correctness instead of just debugging.  ISTM this
> should just use Josh's code directly once it's been written.

Do you have URL for Josh's code? I'd love to see what happening there.

In the meantime, usercopy can use this...

-Kees

-- 
Kees Cook
Chrome OS & Brillo Security

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH v2 0/11] mm: Hardened usercopy Kees Cook <keescook@chromium.org> - 2016-07-14 00:00 +0200
  [PATCH v2 04/11] ARM: uaccess: Enable hardened usercopy Kees Cook <keescook@chromium.org> - 2016-07-14 00:00 +0200
  [PATCH v2 01/11] mm: Implement stack frame object validation Kees Cook <keescook@chromium.org> - 2016-07-14 00:00 +0200
    Re: [PATCH v2 01/11] mm: Implement stack frame object validation Kees Cook <keescook@chromium.org> - 2016-07-14 00:10 +0200
      Re: [PATCH v2 01/11] mm: Implement stack frame object validation Josh Poimboeuf <jpoimboe@redhat.com> - 2016-07-14 07:50 +0200
        Re: [PATCH v2 01/11] mm: Implement stack frame object validation Kees Cook <keescook@chromium.org> - 2016-07-14 20:20 +0200
          Re: [PATCH v2 01/11] mm: Implement stack frame object validation Josh Poimboeuf <jpoimboe@redhat.com> - 2016-07-14 21:30 +0200
            Re: [PATCH v2 01/11] mm: Implement stack frame object validation Kees Cook <keescook@chromium.org> - 2016-07-14 23:40 +0200
    Re: [PATCH v2 01/11] mm: Implement stack frame object validation Andy Lutomirski <luto@amacapital.net> - 2016-07-14 00:10 +0200
  [PATCH v2 06/11] ia64/uaccess: Enable hardened usercopy Kees Cook <keescook@chromium.org> - 2016-07-14 00:00 +0200

csiph-web