forked from luck/tmp_suning_uos_patched
10e9ae9fab
The STACKLEAK feature erases the kernel stack before returning from syscalls. That reduces the information which kernel stack leak bugs can reveal and blocks some uninitialized stack variable attacks. This commit introduces the STACKLEAK gcc plugin. It is needed for tracking the lowest border of the kernel stack, which is important for the code erasing the used part of the kernel stack at the end of syscalls (comes in a separate commit). The STACKLEAK feature is ported from grsecurity/PaX. More information at: https://grsecurity.net/ https://pax.grsecurity.net/ This code is modified from Brad Spengler/PaX Team's code in the last public patch of grsecurity/PaX based on our understanding of the code. Changes or omissions from the original code are ours and don't reflect the original grsecurity/PaX code. Signed-off-by: Alexander Popov <alex.popov@linux.com> Tested-by: Laura Abbott <labbott@redhat.com> Signed-off-by: Kees Cook <keescook@chromium.org> |
||
---|---|---|
.. | ||
.gitignore | ||
cyc_complexity_plugin.c | ||
gcc-common.h | ||
gcc-generate-gimple-pass.h | ||
gcc-generate-ipa-pass.h | ||
gcc-generate-rtl-pass.h | ||
gcc-generate-simple_ipa-pass.h | ||
gen-random-seed.sh | ||
Kconfig | ||
latent_entropy_plugin.c | ||
Makefile | ||
randomize_layout_plugin.c | ||
sancov_plugin.c | ||
stackleak_plugin.c | ||
structleak_plugin.c |