Messages in this thread | | | Subject | Re: [PATCH net-next] x86: bpf_jit_comp: secure bpf jit against spraying attacks | From | Eric Dumazet <> | Date | Mon, 20 May 2013 07:26:33 -0700 |
| |
On Mon, 2013-05-20 at 16:19 +0200, Florian Westphal wrote:
> What about emitting additional instructions at random locations in the > generated code itself? > > Eg., after every instruction, have random chance to insert > 'xor $0xcc,%al; xor $0xcc,%al', etc?
This will be the latest thing I'll do.
Frankly, whole point of BPF JIT is speed.
If we have slow code, just use the interpretor instead.
| |