[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sat, 30 Jan 2016 15:34:56 +0100
From: Jann Horn <jann@...jh.net>
To: kernel-hardening@...ts.openwall.com
Subject: Re: [RFC PATCH 2/2] x86: SROP mitigation:
implement signal cookies
On Sun, Jan 24, 2016 at 12:59:14AM -0700, Scott Bauer wrote:
> This patch adds SROP mitigation logic to the x86 signal delivery
> and sigreturn code. The cookie is placed in the unused alignment
> space above the saved FP state, if it exists. If there is no FP
> state to save then the cookie is placed in the alignment space above
> the sigframe.
A nice side effect of this patch is that it will mitigate the ability of
a process in strict seccomp to effectively call sigprocmask() using
sigreturn.
Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
