Re: [PATCH v4 00/10] Function Granular KASLR

From: Josh Poimboeuf
Date: Wed Jul 22 2020 - 12:07:40 EST


On Wed, Jul 22, 2020 at 07:39:55AM -0700, Kees Cook wrote:
> On Wed, Jul 22, 2020 at 11:27:30AM +0200, Miroslav Benes wrote:
> > Let me CC live-patching ML, because from a quick glance this is something
> > which could impact live patching code. At least it invalidates assumptions
> > which "sympos" is based on.
>
> In a quick skim, it looks like the symbol resolution is using
> kallsyms_on_each_symbol(), so I think this is safe? What's a good
> selftest for live-patching?

The problem is duplicate symbols. If there are two static functions
named 'foo' then livepatch needs a way to distinguish them.

Our current approach to that problem is "sympos". We rely on the fact
that the second foo() always comes after the first one in the symbol
list and kallsyms. So they're referred to as foo,1 and foo,2.

--
Josh