* [kernel-hardening] mmap guard pages
@ 2011-07-30 18:57 Vasiliy Kulikov
0 siblings, 0 replies; only message in thread
From: Vasiliy Kulikov @ 2011-07-30 18:57 UTC (permalink / raw)
To: kernel-hardening
Solar,
What do you think about this?
http://www.openbsd.org/papers/ven05-deraadt/mgp00025.html
In short, each mmap call adds guard pages before and after the allocated
memory. It should catch overflows/underflows of mmap-based buffers.
AFAICS, it's possible to painlessly (in terms of vm waste) enable it on
x86-64.
Thanks,
--
Vasiliy
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2011-07-30 18:57 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-07-30 18:57 [kernel-hardening] mmap guard pages Vasiliy Kulikov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox