Messages in this thread | | | Date | Fri, 9 Jan 2004 04:36:11 +0100 (CET) | From | Jesper Juhl <> | Subject | Re: [PATCH][RFC] invalid ELF binaries can execute - better sanity checking |
| |
On Thu, 8 Jan 2004, Andrew Morton wrote:
> Jesper Juhl <juhl@dif.dk> wrote: > > > > The current Linux kernel does only very basic sanity checking on ELF > > binaries. > > I've always had little confidence in the elf loader. The problem is > complex, the code quality is not high and the consequences of an error are > severe. > Ahh, so I'm not crazy ;) I've been looking at that code trying to convince myself that I should try and deal with it for quite a while.
> I guess others realise this, and the bad guys have probably already > "audited" the code for us, but still. > > I'll merge your additional checks for testing and would encourage you to > keep looking at the problem, thanks. >
Thank you. I'll keep working on this. I'll see if I can get a patch done over the weekend that adds a few more checks and re-do the ones you just merged to be stronger - it may take longer as I probably won't have too much time the next 2-3 days, but I'll se what I can do.
-- Jesper Juhl
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |