Re: [PATCH v2 01/11] mm: Implement stack frame object validation

2016-07-14 Thread Kees Cook
On Thu, Jul 14, 2016 at 12:23 PM, Josh Poimboeuf wrote: > On Thu, Jul 14, 2016 at 11:10:18AM -0700, Kees Cook wrote: >> On Wed, Jul 13, 2016 at 10:48 PM, Josh Poimboeuf wrote: >> > On Wed, Jul 13, 2016 at 03:04:26PM -0700, Kees Cook wrote: >> >> On Wed, Jul 13, 2016 at 3:01 PM, Andy Lutomirski

Re: [PATCH v2 01/11] mm: Implement stack frame object validation

2016-07-14 Thread Josh Poimboeuf
On Thu, Jul 14, 2016 at 11:10:18AM -0700, Kees Cook wrote: > On Wed, Jul 13, 2016 at 10:48 PM, Josh Poimboeuf wrote: > > On Wed, Jul 13, 2016 at 03:04:26PM -0700, Kees Cook wrote: > >> On Wed, Jul 13, 2016 at 3:01 PM, Andy Lutomirski > >> wrote: > >> > On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook

Re: [PATCH v2 01/11] mm: Implement stack frame object validation

2016-07-14 Thread Kees Cook
On Wed, Jul 13, 2016 at 10:48 PM, Josh Poimboeuf wrote: > On Wed, Jul 13, 2016 at 03:04:26PM -0700, Kees Cook wrote: >> On Wed, Jul 13, 2016 at 3:01 PM, Andy Lutomirski wrote: >> > On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: >> >> This creates per-architecture function arch_within_stack_fr

Re: [PATCH v2 01/11] mm: Implement stack frame object validation

2016-07-13 Thread Josh Poimboeuf
On Wed, Jul 13, 2016 at 03:04:26PM -0700, Kees Cook wrote: > On Wed, Jul 13, 2016 at 3:01 PM, Andy Lutomirski wrote: > > On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > >> This creates per-architecture function arch_within_stack_frames() that > >> should validate if a given object is containe

Re: [PATCH v2 01/11] mm: Implement stack frame object validation

2016-07-13 Thread Kees Cook
On Wed, Jul 13, 2016 at 3:01 PM, Andy Lutomirski wrote: > On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: >> This creates per-architecture function arch_within_stack_frames() that >> should validate if a given object is contained by a kernel stack frame. >> Initial implementation is on x86. >>

Re: [PATCH v2 01/11] mm: Implement stack frame object validation

2016-07-13 Thread Andy Lutomirski
On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook wrote: > This creates per-architecture function arch_within_stack_frames() that > should validate if a given object is contained by a kernel stack frame. > Initial implementation is on x86. > > This is based on code from PaX. > This, along with Josh's li

[PATCH v2 01/11] mm: Implement stack frame object validation

2016-07-13 Thread Kees Cook
This creates per-architecture function arch_within_stack_frames() that should validate if a given object is contained by a kernel stack frame. Initial implementation is on x86. This is based on code from PaX. Signed-off-by: Kees Cook --- arch/Kconfig | 9 arch/x8