Re: [kernel-hardening] [PATCH v2 0/5] stackprotector: ascii armor the stack canary

From	Solar Designer <solar@openwall.com>
Newsgroups	linux.kernel
Subject	Re: [kernel-hardening] [PATCH v2 0/5] stackprotector: ascii armor the stack canary
Date	2017-09-20 17:10 +0200
Message-ID	<urONs-4IC-9@gated-at.bofh.it> (permalink)
References	<tKGRz-4dh-7@gated-at.bofh.it> <urulI-8fP-9@gated-at.bofh.it> <urLFT-2u1-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Wed, Sep 20, 2017 at 01:18:04PM +0200, Yann Droneaud wrote:
> Le mardi 19 septembre 2017 ?? 19:16 +0200, Solar Designer a ??crit :
> >
> > We could put/require a NUL in the middle of the canary,
> > but with the full canary being only 64-bit at most that would also
> > make some attacks easier.
> 
> Are you suggesting to randomly select which byte to set to 0 in each
> canary ?

Definitely not.  That's only 8 different possibilities per canary, and
the weakest one will affect exploitability in each scenario.  So that
would be a fairly clear change to the worse.

I suggest that we make no further changes at this time, unless someone
comes up with an idea that would clearly hurt exploitation more than it
helps exploitation, overall across different scenarios.

Alexander

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: [kernel-hardening] [PATCH v2 0/5] stackprotector: ascii armor the stack canary Solar Designer <solar@openwall.com> - 2017-09-19 19:20 +0200
  Re: [kernel-hardening] [PATCH v2 0/5] stackprotector: ascii armor the  stack canary Kees Cook <keescook@chromium.org> - 2017-09-19 22:30 +0200
  Re: [kernel-hardening] [PATCH v2 0/5] stackprotector: ascii armor  the stack canary Daniel Micay <danielmicay@gmail.com> - 2017-09-19 23:20 +0200
  Re: [kernel-hardening] [PATCH v2 0/5] stackprotector: ascii armor  the stack canary Yann Droneaud <ydroneaud@opteya.com> - 2017-09-20 13:50 +0200
    Re: [kernel-hardening] [PATCH v2 0/5] stackprotector: ascii armor the stack canary Solar Designer <solar@openwall.com> - 2017-09-20 17:10 +0200

csiph-web