linux-kernel - Re: [PATCH] arm64: Add config to limit user space to 47bits

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Thu, 14 Jul 2016 13:07:30 -0500
From:	Jeremy Linton <jeremy.linton@....com>
To:	Alexander Graf <agraf@...e.de>, Zheng Xu <Zheng.Xu@....com>,
	Steve Capper <Steve.Capper@....com>
Cc:	Mark Rutland <Mark.Rutland@....com>,
	"mbrugger@...e.com" <mbrugger@...e.com>,
	Ard Biesheuvel <ard.biesheuvel@...aro.org>,
	Catalin Marinas <Catalin.Marinas@....com>,
	Will Deacon <Will.Deacon@....com>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
	Stuart Monteith <Stuart.Monteith@....com>,
	"linux-arm-kernel@...ts.infradead.org" 
	<linux-arm-kernel@...ts.infradead.org>
Subject: Re: [PATCH] arm64: Add config to limit user space to 47bits

On 07/14/2016 02:14 AM, Alexander Graf wrote:
>
> On 14.07.16 09:03, Zheng Xu wrote:
>> LuaJIT also fix the 48VA issue by allocating heap memory below 47 bits.
>>
>> For mozjs issue, if there are pointers to .rodata, it can be a problem. Does it happen on master and do we have any case to reproduce the issue so that I can take a look?
>
> mozjs is fixed with your patch. I backported it to all of the ancient
> versions of mozjs, so we're probably good there. Though every distro
> will have to redo that work in their own trees, because older versions
> of mozjs are no longer maintained upstream. If you want to be a hero,
> you can try to port polkitd and gnome to use more recent versions of
> mozjs ;). Or maybe they can already and we just messed up packaging.


I have a polkit built against mozjs45, getting it to work on the other 
hand is the yak of the day...