[PATCH] D29657: [safestack] Add runtime support for MPX-based hardening

Michael LeMay via Phabricator via llvm-commits llvm-commits at lists.llvm.org
Thu Feb 9 18:08:01 PST 2017


mlemay-intel updated this revision to Diff 87931.
mlemay-intel added a comment.
Herald added a subscriber: kubamracek.

- Reserve space during runtime library initialization for safe stacks to be allocated later. This helps to prevent ordinary data from being allocated at addresses that could lead to bound check violations.
- Protect the variable that records the address of the most recent safe stack by moving it above the bound.
- Add MprotectReadWrite to sanitizer_posix.cc.


https://reviews.llvm.org/D29657

Files:
  lib/safestack/CMakeLists.txt
  lib/safestack/safestack.cc
  lib/safestack/safestackmpx.cc
  lib/sanitizer_common/sanitizer_common.h
  lib/sanitizer_common/sanitizer_posix.cc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: D29657.87931.patch
Type: text/x-patch
Size: 11329 bytes
Desc: not available
URL: <http://lists.llvm.org/pipermail/llvm-commits/attachments/20170210/ff6e222e/attachment.bin>


More information about the llvm-commits mailing list