]> git.karo-electronics.de Git - linux-beck.git/commit
projects / linux-beck.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fee1b54) | patch
s390/bpf,jit: address randomize and write protect jit code
authorHeiko Carstens <heiko.carstens@de.ibm.com>
Tue, 16 Jul 2013 11:25:49 +0000 (13:25 +0200)
committerMartin Schwidefsky <schwidefsky@de.ibm.com>
Thu, 18 Jul 2013 10:44:37 +0000 (12:44 +0200)
commitaa2d2c73c21f22ce4c643128b671aa7e7bbff54f
tree2f30547e740f0931dce2b4d864ee952ef05a297atree | snapshot
parentfee1b5488d76396d8f95989624d37f436b3fba44commit | diff
s390/bpf,jit: address randomize and write protect jit code

This is the s390 variant of 314beb9b "x86: bpf_jit_comp: secure bpf
jit against spraying attacks".
With this change the whole jit code and literal pool will be write
protected after creation. In addition the start address of the jit
code won't be always on a page boundary anymore.

Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
arch/s390/net/bpf_jit_comp.c diff | blob | history
Beck SC1x5 Kernel