lkml.org 
[lkml]   [2022]   [Oct]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH v2 18/39] mm: Add guard pages around a shadow stack.
    Date
    On 10/10/2022 14:40, Florian Weimer wrote:
    > * Andrew Cooper:
    >
    >>> POSIX does not appear to require PROT_NONE mappings
    >>> for the stack guard region, either. However, the
    >>> pthread_attr_setguardsize manual page pretty clearly says that it's got
    >>> to be unreadable and unwriteable. Hence my question.
    >> Hmm.  If that's what the manuals say, then fine.
    >>
    >> But honestly, you don't get very far at all without faulting on a
    >> read-only stack.
    > I guess we can update the manual page proactively. It does look like a
    > tempting optimization.

    Here's one I prepared earlier, discussing getting supervisor shadow
    stacks working in Xen.

    http://xenbits.xen.org/people/andrewcoop/Xen-CET-SS.pdf

    This optimisation turned out to be very helpful by being able to put the
    shadow stacks in what were previously the guard holes, meaning we didn't
    actually need to allocate any more memory for the stacks.

    ~Andrew
    \
     
     \ /
      Last update: 2022-10-10 15:57    [W:2.509 / U:0.020 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site