per page execute

linas at austin.ibm.com linas at austin.ibm.com
Sat Jan 10 09:46:43 EST 2004


I'm reading some old email ...

On Wed, Dec 31, 2003 at 08:48:41AM +1030, Alan Modra wrote:
>
> On Sat, Dec 27, 2003 at 11:15:25PM +1100, Anton Blanchard wrote:
> >   [25] .plt NOBITS 10010c08 000c00 0000c0 00 WAX 0   0  4
> >   [26] .bss NOBITS 10010cc8 000c00 000004 00  WA 0   0  1
> >
> > Look how the non executable bss butts right onto the executable plt.
> > Even with the patch below, we are failing some security tests that try
> > and exec stuff out of the bss. Thats because the stuff ends up in the same
> > page as the plt. Alan, could this be considered a toolchain bug?
>
> Possibly.  What about .got (exec) and adjacent .sdata (non-exec)?  The
> ABI says that shared libs access .sdata via the got pointer, so
> there's no hope of separating them.

Dumb question: can you pad out the .got to a 4K boundary?
Yes, that's a bogus fix is the kernel page size is different.

--linas

** Sent via the linuxppc64-dev mail list. See http://lists.linuxppc.org/





More information about the Linuxppc64-dev mailing list