diff options
| author | Ulrich Drepper <drepper@redhat.com> | 2009-07-15 17:41:36 -0700 |
|---|---|---|
| committer | Ulrich Drepper <drepper@redhat.com> | 2009-07-15 17:41:36 -0700 |
| commit | d7bd7a8ae8cdb3f1414b1e032759d9ef324eb040 (patch) | |
| tree | 555d873e7dc81df310b6dff476a3d893b6c25a99 /ChangeLog | |
| parent | 59cbcac015cdd446c346cfd2c2ada3f94ef540b2 (diff) | |
Secure AVX changes for auditing code.
The original AVX patch used a function pointer to handle the difference
between machines with and without AVX support. This is insecure. A
well-placed memory exploit could lead to redirection of the execution.
Using a variable and several tests is a bit slower but cannot be
exploited in this way.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 7 |
1 files changed, 4 insertions, 3 deletions
@@ -1,7 +1,8 @@ -2009-07-07 H.J. Lu <hongjiu.lu@intel.com> +2009-07-15 Ulrich Drepper <drepper@redhat.com> - * elf/Makefile: Don't build modules for tst-audit4 and tst-audit5 - for anything but x86-64 targets. + * sysdeps/x86-64/dl-trampoline.h: Remove after integrating code into... + * sysdeps/x86-64/dl-trampoline.S: ...here. Rewrite to avoid function + pointers in writable memory. 2009-07-07 H.J. Lu <hongjiu.lu@intel.com> |