Re: [kernel-hardening] [PATCH] use get_random_long for the per-task stack canary

From: Kees Cook
Date: Thu May 04 2017 - 10:32:55 EST


On Thu, May 4, 2017 at 7:04 AM, Rik van Riel <riel@xxxxxxxxxx> wrote:
> On Thu, 2017-05-04 at 09:32 -0400, Daniel Micay wrote:
>> The stack canary is an unsigned long and should be fully initialized
>> to
>> random data rather than only 32 bits of random data.
>>
>> Cc: stable@xxxxxxxxxxxxxxx
>> Signed-off-by: Daniel Micay <danielmicay@xxxxxxxxx>
>>
> Acked-by: Rik van Riel <riel@xxxxxxxxxx>

Thanks! Ingo, should this go via tip?

Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>

-Kees

--
Kees Cook
Pixel Security