On Fri, May 21, 2021 at 01:34:52PM +0000, Marcin Wojtas wrote:
> The branch main has been updated by mw:
> 
> URL: 
> https://cgit.FreeBSD.org/src/commit/?id=af949c590bd8a00a5973b5875d7e0fa6832ea64a
> 
> commit af949c590bd8a00a5973b5875d7e0fa6832ea64a
> Author:     Marcin Wojtas <m...@freebsd.org>
> AuthorDate: 2021-05-21 09:29:22 +0000
> Commit:     Marcin Wojtas <m...@freebsd.org>
> CommitDate: 2021-05-21 13:33:06 +0000
> 
>     Disable stack gap for ntpd during build.
>     
>     When starting, ntpd calls setrlimit(2) to limit maximum size of its
>     stack. The stack limit chosen by ntpd is 200K, so when stack gap
>     is enabled, the stack gap is larger than this limit, which results
>     in ntpd crashing.

Would it make sense to update the stack limit enforcement code to take
the stack gap into account? I haven't looked at HardenedBSD's stack
randomization for a while, but if memory serves correctly, we made
that change.

Thanks,

-- 
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

Attachment: signature.asc
Description: PGP signature

Reply via email to