[PATCH] D29657: [safestack] Add runtime support for MPX-based hardening

[Michael LeMay via Phabricator via llvm-commits]

mlemay-intel added a comment.

In https://reviews.llvm.org/D29657#669919, @kcc wrote:

> Michael ,
>  Please excuse me if I missed some email thread on llvm-dev describing at the high level what you are doing with MPX. 
>  If there was no such thread I encourage you to start one.
>
> I am personally extremely skeptical about anything related to MPX
>  (see https://github.com/google/sanitizers/wiki/AddressSanitizerIntelMemoryProtectionExtensions and the more recent and detailed intel-mpx.github.io).
>  Now, from a quick glance it looks like you are using the MPX instructions for something else,
>  but it deserves a discussion before we look at the patches.


Hi Kostya,

You haven't missed anything; I'm in the middle of writing the llvm-dev post now. :)  Thanks for your feedback.  Very briefly, I'm using MPX to enforce something analogous to a coarse-grained segment limit rather than fine-grained per-object bounds.


https://reviews.llvm.org/D29657