lkml.org 
[lkml]   [2009]   [Jun]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
Patch in this message
/
From
Subject[PATCH v3 7/9] x86: mark writable vDSO sections as broken
Date
The vDSO is mapped read-only into the process' address space, so
any write accesses to it are broken and would segfault.

Additionally, if there is any uninitialized data, the vDSO setup
code does not allocate any space for it, so this is doubly broken.

The .dynbss section is a place to put symbols which are defined by
dynamic objects, are referenced by regular objects, and are not
functions. Space for these objects is allocated in the process image,
and the dynamic linker copies the object data (using a copy relocation).
So, there should never ever be a .dynbss section in a shared object
(and GNU binutils can't produce one, for sure), but then we can place
it into .broken, too.

As a side effect, the .data section now only contains the Global Offset
Table. Give it a more appropriate name for that.

Signed-off-by: Petr Tesarik <ptesarik@suse.cz>
---
arch/x86/vdso/vdso-layout.lds.S | 17 +++++++++++------
1 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/arch/x86/vdso/vdso-layout.lds.S b/arch/x86/vdso/vdso-layout.lds.S
index 74fc5ae..53317a6 100644
--- a/arch/x86/vdso/vdso-layout.lds.S
+++ b/arch/x86/vdso/vdso-layout.lds.S
@@ -48,13 +48,8 @@ SECTIONS
.rodata : {
*(.rodata*)
} :text
- .data : {
- *(.data*)
+ .got : {
*(.got.plt) *(.got)
- *(.gnu.linkonce.d.*)
- *(.bss*)
- *(.dynbss*)
- *(.gnu.linkonce.b.*)
}

/*
@@ -76,6 +71,16 @@ SECTIONS
*/
.broken : {
/*
+ * The vDSO is mapped read-only, so any writable
+ * sections are broken (and will segfault at runtime).
+ * Additionally, space for uninitialized data is not
+ * even allocated by the vDSO setup code.
+ */
+ *(.data* .gnu.linkonce.d.*)
+ *(.bss* .gnu.linkonce.b.*)
+ *(.dynbss*)
+
+ /*
* Code in the Procedure Linkage Table will segfault.
*/
*(.plt)
--
1.6.0.2


\
 
 \ /
  Last update: 2009-06-16 14:59    [W:0.064 / U:0.084 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site