Re: [kernel-hardening] Re: [PATCH] fork: make whole stack_canary random

From: Florian Weimer
Date: Mon Oct 31 2016 - 17:26:43 EST


* Jann Horn:

> Until recently: Zero, no guard pages below stacks, stack overflow
> goes straight into some other allocation.
> Now: One guard page, thanks to a lot of work by Andy Lutomirski.
> (I think that change is in the current 4.9-rc3 kernel, but not in
> any stable kernel yet.)

Sorry, I meant for the stack allocation in user space.

(I'm very much a user space person only.)