linux-kernel - Re: [PATCH] binfmt_elf: randomize PIE binaries (2nd try)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <9a8748490610200520j6d708a52p2f90effd4b8893d9@mail.gmail.com>
Date:	Fri, 20 Oct 2006 14:20:31 +0200
From:	"Jesper Juhl" <jesper.juhl@...il.com>
To:	"Marcus Meissner" <meissner@...e.de>
Cc:	"Dave Jones" <davej@...hat.com>, linux-kernel@...r.kernel.org,
	akpm@...l.org, arjan@...ux.intel.com
Subject: Re: [PATCH] binfmt_elf: randomize PIE binaries (2nd try)

On 20/10/06, Marcus Meissner <meissner@...e.de> wrote:
> Randomizes -pie compiled binaries from PAGE_SIZE up to
> ELF_ET_DYN_BASE.
>
> 0 -> PAGE_SIZE is excluded to allow NULL ptr accesses
> to fail.
>
> Signed-off-by: Marcus Meissner <meissner@...e.de>
>
> ----
>  binfmt_elf.c |    8 +++++++-
>  1 file changed, 7 insertions(+), 1 deletion(-)
>
> --- linux-2.6.18/fs/binfmt_elf.c.xx     2006-10-20 10:42:03.000000000 +0200
> +++ linux-2.6.18/fs/binfmt_elf.c        2006-10-20 10:51:27.000000000 +0200
> @@ -856,7 +856,13 @@
>                          * default mmap base, as well as whatever program they
>                          * might try to exec.  This is because the brk will
>                          * follow the loader, and is not movable.  */
> -                       load_bias = ELF_PAGESTART(ELF_ET_DYN_BASE - vaddr);
> +                       if (current->flags & PF_RANDOMIZE)
> +                               load_bias = randomize_range(PAGE_SIZE,
> +                                                           ELF_ET_DYN_BASE,
> +                                                           0);

How about putting the two lines above on one line?  ^^^^^

> +                                                           ELF_ET_DYN_BASE, 0);


-- 
Jesper Juhl <jesper.juhl@...il.com>
Don't top-post  http://www.catb.org/~esr/jargon/html/T/top-post.html
Plain text mails only, please      http://www.expita.com/nomime.html
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/