| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | save AT_HWCAP from auxv for subsequent use in machine-specific code•••it's expected that this will be needed/useful only in asm, so I've
given it its own symbol that can be addressed in pc-relative ways from
asm rather than adding a field in the __libc structure which would
require hard-coding the offset wherever it's used.
| Rich Felker | 2012-07-27 | 1 | -0/+1 |
| * | direct syscall to open in __init_security needs O_LARGEFILE•••it probably does not matter for /dev/null, but this should be done
consistently anyway.
| Rich Felker | 2012-06-14 | 1 | -1/+1 |
| * | fix missing static (namespace clash) | Rich Felker | 2012-05-10 | 1 | -1/+1 |
| * | overhaul SSP support to use a real canary•••pthread structure has been adjusted to match the glibc/GCC abi for
where the canary is stored on i386 and x86_64. it will need variants
for other archs to provide the added security of the canary's entropy,
but even without that it still works as well as the old "minimal" ssp
support. eventually such changes will be made anyway, since they are
also needed for GCC/C11 thread-local storage support (not yet
implemented).
care is taken not to attempt initializing the thread pointer unless
the program actually uses SSP (by reference to __stack_chk_fail).
| Rich Felker | 2012-05-03 | 1 | -2/+4 |
| * | first attempt at enabling stack protector support•••the code is written to pre-init the thread pointer in static linked
programs that pull in __stack_chk_fail or dynamic-linked programs that
lookup the symbol. no explicit canary is set; the canary will be
whatever happens to be in the thread structure at the offset gcc
hard-coded. this can be improved later.
| Rich Felker | 2012-04-24 | 1 | -0/+7 |
| * | security hardening: ensure suid programs have valid stdin/out/err•••this behavior (opening fds 0-2 for a suid program) is explicitly
allowed (but not required) by POSIX to protect badly-written suid
programs from clobbering files they later open.
this commit does add some cost in startup code, but the availability
of auxv and the security flag will be useful elsewhere in the future.
in particular auxv is needed for static-linked vdso support, which is
still waiting to be committed (sorry nik!)
| Rich Felker | 2011-08-23 | 1 | -0/+26 |
