Files
linux/include/linux
Rik van Riel 022c204040 random,stackprotect: introduce get_random_canary function
Patch series "stackprotector: ascii armor the stack canary", v2.

Zero out the first byte of the stack canary value on 64 bit systems, in
order to mitigate unterminated C string overflows.

The null byte both prevents C string functions from reading the canary,
and from writing it if the canary value were guessed or obtained through
some other means.

Reducing the entropy by 8 bits is acceptable on 64-bit systems, which
will still have 56 bits of entropy left, but not on 32 bit systems, so
the "ascii armor" canary is only implemented on 64-bit systems.

Inspired by the "ascii armor" code in execshield and Daniel Micay's
linux-hardened tree.

Also see https://github.com/thestinger/linux-hardened/

This patch (of 5):

Introduce get_random_canary(), which provides a random unsigned long
canary value with the first byte zeroed out on 64 bit architectures, in
order to mitigate non-terminated C string overflows.

The null byte both prevents C string functions from reading the canary,
and from writing it if the canary value were guessed or obtained through
some other means.

Reducing the entropy by 8 bits is acceptable on 64-bit systems, which
will still have 56 bits of entropy left, but not on 32 bit systems, so
the "ascii armor" canary is only implemented on 64-bit systems.

Inspired by the "ascii armor" code in the old execshield patches, and
Daniel Micay's linux-hardened tree.

Link: http://lkml.kernel.org/r/20170524155751.424-2-riel@redhat.com
Signed-off-by: Rik van Riel <riel@redhat.com>
Acked-by: Kees Cook <keescook@chromium.org>
Cc: Daniel Micay <danielmicay@gmail.com>
Cc: "Theodore Ts'o" <tytso@mit.edu>
Cc: H. Peter Anvin <hpa@zytor.com>
Cc: Andy Lutomirski <luto@amacapital.net>
Cc: Ingo Molnar <mingo@kernel.org>
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Yoshinori Sato <ysato@users.sourceforge.jp>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2017-07-12 16:26:03 -07:00
..
2017-04-21 10:45:01 -04:00
2017-06-03 19:29:26 +09:00
2017-07-03 01:43:45 -07:00
2016-07-08 16:23:11 +02:00
2016-12-22 22:58:37 -05:00
2017-06-08 18:52:36 -07:00
2017-07-03 17:00:59 -06:00
2017-02-10 15:52:24 -05:00
2017-07-06 16:24:33 -07:00
2017-01-25 13:17:47 -05:00
2017-07-01 16:15:13 -07:00
2017-07-01 16:15:13 -07:00
2017-07-03 02:22:52 -07:00
2017-07-03 16:56:28 -06:00
2017-05-24 12:43:30 -04:00
2017-06-05 16:59:12 +02:00
2017-04-18 20:41:12 +02:00
2017-06-22 15:43:47 +01:00
2017-06-09 11:52:07 +02:00
2017-05-18 10:30:19 -06:00
2017-07-10 16:32:31 -07:00
2016-12-05 19:01:16 -05:00
2017-07-07 09:49:24 +10:00
2016-10-28 08:48:16 -06:00
2017-04-10 17:15:02 +02:00
2016-05-17 15:48:12 -04:00
2017-04-27 05:13:04 -04:00
2016-12-05 19:01:16 -05:00
2017-07-07 20:09:10 -04:00
2016-12-25 17:21:22 +01:00
2017-06-05 16:59:10 +02:00
2017-03-21 10:15:47 +02:00
2017-05-18 10:07:41 -04:00
2017-05-18 10:07:40 -04:00
2017-06-21 14:37:12 -04:00
2017-07-10 16:32:34 -07:00
2016-09-14 09:18:09 -06:00
2017-07-12 16:26:01 -07:00
2017-01-05 15:01:55 -06:00
2016-05-11 22:37:54 +02:00
2017-05-03 15:52:10 -07:00
2016-12-12 18:55:06 -08:00
2017-06-04 16:53:00 +02:00
2017-02-24 17:46:57 -08:00
2016-09-27 12:33:47 +02:00
2016-12-06 11:05:46 +01:00
2017-04-24 14:30:46 -04:00
2017-01-12 16:48:26 -05:00
2017-04-26 13:03:04 -04:00
2016-04-25 15:09:11 -04:00
2017-07-12 16:26:02 -07:00
2017-05-26 10:10:37 +02:00
2016-12-06 10:17:03 +02:00
2016-10-31 16:18:30 -04:00
2016-10-14 11:36:59 -07:00
2016-09-27 21:52:00 -04:00
2017-05-18 10:07:40 -04:00
2017-02-13 21:44:09 -05:00
2017-06-29 10:48:57 +01:00
2016-07-06 10:51:14 +01:00
2017-05-03 15:52:10 -07:00
2017-06-08 10:35:49 +02:00
2016-06-14 10:54:40 -07:00
2017-07-06 16:24:30 -07:00
2017-03-26 15:09:45 +02:00
2017-06-15 12:12:40 -04:00
2016-12-26 23:53:46 -05:00
2017-06-08 18:52:42 -07:00
2017-06-01 14:53:04 -04:00
2017-03-09 15:42:33 +01:00
2017-01-10 18:31:55 -08:00
2017-05-09 16:43:22 +03:00
2017-06-09 11:54:54 +02:00