Re: [BROKEN PATCH] syscalls leak data via registers?

From: Pavel Machek (pavel@suse.cz)
Date: Thu Aug 07 2003 - 15:31:14 EST


Hi!

> > I believe userspace depends on registers to be preserved over system
> > call, except for eax.
>
> That's what I was wondering. Does it? Is that a documented part of the
> syscall interface?
>
> > So what you found is not only security problem,
> > but also crasher bug.
>
> In these sense that it crashes userspace?

Yes. But I was probably wrong. gcc has to preserve callee saved
registers, and that should be enough.

Information leak looks very much real, through.
                                                                Pavel

-- 
When do you have a heart between your knees?
[Johanka's followup: and *two* hearts?]
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Thu Aug 07 2003 - 22:00:40 EST