Re: [PATCH] MIPS: usercopy: Implement stack frame object validation

2017-08-10 Thread Kees Cook
On Thu, Aug 10, 2017 at 1:24 AM, Matt Redfearn wrote: > Hi Kees, > > > On 08/08/17 20:11, Kees Cook wrote: >> >> On Tue, Aug 8, 2017 at 5:23 AM, Matt Redfearn >> wrote: >>> >>> This implements arch_within_stack_frames() for MIPS that validates if an >>> object is wholly contained by a kernel stac

Re: [PATCH] MIPS: usercopy: Implement stack frame object validation

2017-08-10 Thread Matt Redfearn
Hi Kees, On 08/08/17 20:11, Kees Cook wrote: On Tue, Aug 8, 2017 at 5:23 AM, Matt Redfearn wrote: This implements arch_within_stack_frames() for MIPS that validates if an object is wholly contained by a kernel stack frame. With CONFIG_HARDENED_USERCOPY enabled, MIPS now passes the LKDTM test

Re: [PATCH] MIPS: usercopy: Implement stack frame object validation

2017-08-08 Thread Kees Cook
On Tue, Aug 8, 2017 at 5:23 AM, Matt Redfearn wrote: > This implements arch_within_stack_frames() for MIPS that validates if an > object is wholly contained by a kernel stack frame. > > With CONFIG_HARDENED_USERCOPY enabled, MIPS now passes the LKDTM tests > USERCOPY_STACK_FRAME_TO, USERCOPY_STACK

[PATCH] MIPS: usercopy: Implement stack frame object validation

2017-08-08 Thread Matt Redfearn
This implements arch_within_stack_frames() for MIPS that validates if an object is wholly contained by a kernel stack frame. With CONFIG_HARDENED_USERCOPY enabled, MIPS now passes the LKDTM tests USERCOPY_STACK_FRAME_TO, USERCOPY_STACK_FRAME_FROM and USERCOPY_STACK_BEYOND on a Creator Ci40. Since