[PATCH] Add Safe-Linking to fastbins and tcache
Carlos O'Donell
carlos@redhat.com
Mon Mar 23 16:23:18 GMT 2020
On 3/23/20 12:11 PM, DJ Delorie wrote:
> Adhemerval Zanella <adhemerval.zanella@linaro.org> writes:
>> So although this patch does help improve the situation, I think we should
>> move to a more robust and arch neutral way to obtain entropy for malloc
>> hardnening.
>
> Can we agree to approve this patch, and replace the "12" with something
> better later? That way we'll at least make incremental progress.
I agree.
I'm fine with using ASLR/12-shift to get entropy.
I think the next logical step is to revive Florian's patch to harden prev
and prevsize and storing entropy in a global.
So I see this as two steps.
--
Cheers,
Carlos.
More information about the Libc-alpha
mailing list