Messages in this thread | | | Subject | RE: [PATCH net-next] x86: bpf_jit_comp: secure bpf jit against spraying attacks | From | Eric Dumazet <> | Date | Mon, 20 May 2013 06:34:53 -0700 |
| |
On Mon, 2013-05-20 at 09:51 +0100, David Laight wrote:
> Hmmm.... anyone looking to overwrite kernel code will then start > looking for blocks of 0xcc bytes and know that what follows > is the beginning of a function. > That isn't any harder than random writes. > > Copying a random part of .rodata might be better - especially > if you can find part of .rodata.str*.
That's not the point. We want to catch jumps to before/after the code.
An attacker having full access to kernel code in read and write mode has full power anyway to do whatever he wants.
| |