|
|
Subscribe / Log in / New account

draft of stack clearing for arm64

From:  Laura Abbott <labbott-AT-redhat.com>
To:  Kees Cook <keescook-AT-chromium.org>, Alex Popov <alex.popov-AT-linux.com>
Subject:  [RFC][PATCH 0/2] draft of stack clearing for arm64
Date:  Mon, 10 Jul 2017 15:04:41 -0700
Message-ID:  <1499724283-30719-1-git-send-email-labbott@redhat.com>
Cc:  Laura Abbott <labbott-AT-redhat.com>, kernel-hardening-AT-lists.openwall.com, Mark Rutland <mark.rutland-AT-arm.com>, Ard Biesheuvel <ard.biesheuvel-AT-linaro.org>

I made an attempt at implementing stack clearing for arm64 using roughly
the same algorithm as x86. It passes some level of basic tests but it definitely
needs more careful review and thought ("submit early and often").

As an added follow up, self-protection.rst should also be updated with some
details about how stackleak actually works for people who want to follow on
for other arches.

Laura Abbott (2):
  stackleak: Update for arm64
  arm64: Clear the stack

 arch/arm64/Kconfig                     |  1 +
 arch/arm64/include/asm/processor.h     |  3 ++
 arch/arm64/kernel/asm-offsets.c        |  3 ++
 arch/arm64/kernel/entry.S              | 92 ++++++++++++++++++++++++++++++++++
 arch/arm64/kernel/process.c            | 18 +++++++
 drivers/firmware/efi/libstub/Makefile  |  3 +-
 scripts/Makefile.gcc-plugins           |  5 +-
 scripts/gcc-plugins/stackleak_plugin.c | 25 +++++++--
 8 files changed, 143 insertions(+), 7 deletions(-)

-- 
2.7.5




Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds