Skip to content

arm64: harden shadow call stack pointer handling

Ard Biesheuvel linux-arm-kernel 2 versions – Applied

Status from this message: Applied to arm64 (for-next/scs), thanks!

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v2 Latest2 patches 5 repliesApplied
  2. v12 patches 0 repliesSuperseded

Changes in v2 from the cover letter

- rebase onto v6.2-rc1

Patches in v2 Applied

#Subject and filesSizeRepliesApplied
1/2arm64: Always load shadow stack pointer directly from the task structarch/arm64/include/asm/scs.h arch/arm64/kernel/entry.S arch/arm64/kernel/head.S+7 -62 replies
2/2arm64: Stash shadow stack pointer in the task struct on interruptarch/arm64/kernel/entry.S+5 -72 replies

Reviews trailers per patch

All 2 patches have a Reviewed-by or Acked-by.

PatchMark RutlandKees Cook
1/2A-b R-b
2/2A-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.

Read the v2 thread

Cover letter [PATCH v2 0/2] arm64: harden shadow call stack pointer handling

A couple of tweaks to the arm64 entry code to avoid loading the shadow call stack pointer in a way that could potentially be unsafe in the context of ROP attacks.

Changes since v1:
- rebase onto v6.2-rc1

Cc Sami Tolvanen <[email protected]>
Cc Kees Cook <[email protected]>

Ard Biesheuvel (2):
arm64: Always load shadow stack pointer directly from the task struct
arm64: Stash shadow stack pointer in the task struct on interrupt

 arch/arm64/include/asm/scs.h |  7 ++++---
 arch/arm64/kernel/entry.S    | 16 +++++++---------
 arch/arm64/kernel/head.S     |  2 +-
 3 files changed, 12 insertions(+), 13 deletions(-)
Signature · 7 lines
2.39.0


_______________________________________________
linux-arm-kernel mailing list
[email protected]
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel