gcc-plugins: Add structleak for more stack initialization
This plugin detects any structures that contain __user attributes and
makes sure it is being fully initialized so that a specific class of
information exposure is eliminated. (This plugin was originally designed
to block the exposure of siginfo in CVE-2013-2141.)
Ported from grsecurity/PaX. This version adds a verbose option to the
plugin and the Kconfig.
Signed-off-by:
Kees Cook <keescook@chromium.org>
Showing
- arch/Kconfig 22 additions, 0 deletionsarch/Kconfig
- include/linux/compiler.h 5 additions, 1 deletioninclude/linux/compiler.h
- scripts/Makefile.gcc-plugins 4 additions, 0 deletionsscripts/Makefile.gcc-plugins
- scripts/gcc-plugins/structleak_plugin.c 246 additions, 0 deletionsscripts/gcc-plugins/structleak_plugin.c
Loading
Please register or sign in to comment