Messages in this thread | | | Date | Tue, 10 Apr 2012 16:32:10 -0700 | From | "H. Peter Anvin" <> | Subject | Re: + syscalls-x86-add-__nr_kcmp-syscall-v8.patch added to -mm tree |
| |
On 04/10/2012 04:08 PM, Oleg Nesterov wrote: > > OK, since this is discussed again... > > Can this comment can also explain why do we obfuscate the pointers > by type? I mean, I don't really understand why the one-dimensional > cookies[2] is "not enough" from security pov. >
Because it's cheap. "Just enough" is not what you want to shoot for, ever, you want to get past the "just enough" point and then consider "what can I get for cheap at this point"?
-hpa
| |