[PATCH 0/2] start_kernel: omit stack canary

2023-04-17 Thread ndesaulniers
A security research paper was recently published detailing Catch Handler Oriented Programming (CHOP) attacks. https://download.vusec.net/papers/chop_ndss23.pdf The TL;DR being that C++ structured exception handling runtimes are attractive gadgets for Jump Oriented Programming (JOP) attacks. In res

Re: [PATCH 0/2] start_kernel: omit stack canary

2023-04-13 Thread Peter Zijlstra
On Wed, Apr 12, 2023 at 11:32:11AM -0700, ndesaulni...@google.com wrote: > Nick Desaulniers (2): > start_kernel: add no_stack_protector fn attr > start_kernel: omit prevent_tail_call_optimization for newer toolchains > Your second patch has a vile comment style :-) Other than that,

[PATCH 0/2] start_kernel: omit stack canary

2023-04-12 Thread ndesaulniers
A security research paper was recently published detailing Catch Handler Oriented Programming (CHOP) attacks. https://download.vusec.net/papers/chop_ndss23.pdf The TL;DR being that C++ structured exception handling runtimes are attractive gadgets for Jump Oriented Programming (JOP) attacks. In res