Re: [PATCH v3 08/10] x86-64: Emulate legacy vsyscalls

[Brian Gerst]

On Tue, May 31, 2011 at 9:16 AM, Andy Lutomirski <luto@xxxxxxx> wrote:
> There's a fair amount of code in the vsyscall page. ÂIt contains a
> syscall instruction (in the gettimeofday fallback) and who knows
> what will happen if an exploit jumps into the middle of some other
> code.
>
> Reduce the risk by replacing the vsyscalls with short magic
> incantations that cause the kernel to emulate the real vsyscalls.
> These incantations are useless if entered in the middle.

How about remapping the vsyscall page into a random page in the
modules area, and make the fixed page simply have stubs that jump to
the code in that page.  That would solve the fixed address syscall
problem without any more overhead.

--
Brian Gerst
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/