lkml.org 
[lkml]   [2006]   [Aug]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Subject[patch 0/5] -fstack-protector feature for the kernel (try 2)
    From
    Date
    This patch series adds support for the gcc -fstack-protector feature to
    the kernel. While gcc 4.1 supports this feature for userspace, the patches to support
    it for the kernel only got added to the gcc tree on 27/7/2006 (eg for 4.2);
    it is expected that several distributors will backport this patch to their 4.1
    gcc versions. (For those who want to know more, see gcc PR 28281)

    -fstack-protector is a security feature in gcc that causes "selected" functions
    to store a special "canary" value at the start of the function, just below
    the return address. At the end of the function, just before using this
    return address with the "ret" instruction, this canary value is compared to
    the reference value again. If the value of the stack canary has changed, it is a sign
    that there has been some stack corruption (most likely due to a buffer overflow) that
    has compromised the integrity of the return address.

    Standard, the "selected" functions are those that actually have stack
    buffers of at least 8 bytes, this selection is done to limit the overhead to
    only those functions with the highest risk potential. There is an override to enable this
    for all functions.

    On first sight this would not be needed for the kernel, because the kernel
    is "perfect" and "has no buffer overflows on the stack". I thought that too
    for a long time, but the last year has shown a few cases where that would
    have been overly naive.

    This feature has some performance overhead (but it's not that incredibly expensive
    either) so it should be a configuration option for those who want this extra security.

    I've included fixes for the comments from the last review on lkml, and especially the Makefile
    side is now changed to automatically detect if the used gcc has the fix for PR 28281.

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-08-16 19:13    [W:0.023 / U:91.844 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site