[PATCH] Add Safe-Linking to fastbins and tcache

Carlos O'Donell carlos@redhat.com
Mon Mar 23 16:23:18 GMT 2020


On 3/23/20 12:11 PM, DJ Delorie wrote:
> Adhemerval Zanella <adhemerval.zanella@linaro.org> writes:
>> So although this patch does help improve the situation, I think we should
>> move to a more robust and arch neutral way to obtain entropy for malloc
>> hardnening. 
> 
> Can we agree to approve this patch, and replace the "12" with something
> better later?  That way we'll at least make incremental progress.
 
I agree. 

I'm fine with using ASLR/12-shift to get entropy. 

I think the next logical step is to revive Florian's patch to harden prev
and prevsize and storing entropy in a global.

So I see this as two steps.

-- 
Cheers,
Carlos.



More information about the Libc-alpha mailing list