gcc-plugins: Add structleak for more stack initialization

Browse source

This plugin detects any structures that contain __user attributes and
makes sure it is being fully initialized so that a specific class of
information exposure is eliminated. (This plugin was originally designed
to block the exposure of siginfo in CVE-2013-2141.)

Ported from grsecurity/PaX. This version adds a verbose option to the
plugin and the Kconfig.

Signed-off-by: Kees Cook <keescook@chromium.org>

...

This commit is contained in:

Kees Cook 2017-01-13 11:14:39 -08:00

parent 8d4973a1c0

commit c61f13eaa1

4 changed files with 277 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

22

arch/Kconfig

View file

6

include/linux/compiler.h

View file

4

scripts/Makefile.gcc-plugins

View file

246

scripts/gcc-plugins/structleak_plugin.c

View file