1. 20 Dec, 2017 3 commits
  2. 17 Nov, 2017 3 commits
  3. 07 Nov, 2017 2 commits
  4. 31 Oct, 2017 2 commits
  5. 12 Oct, 2017 6 commits
  6. 11 Oct, 2017 4 commits
  7. 10 Oct, 2017 1 commit
  8. 30 Sep, 2017 3 commits
  9. 28 Sep, 2017 1 commit
  10. 20 Sep, 2017 1 commit
  11. 19 Sep, 2017 1 commit
  12. 18 Sep, 2017 2 commits
  13. 15 Sep, 2017 3 commits
  14. 14 Sep, 2017 2 commits
  15. 13 Sep, 2017 1 commit
  16. 11 Sep, 2017 1 commit
  17. 24 May, 2017 1 commit
    • Vivek Das Mohapatra's avatar
      capsule-dlmopen.c: don't fake dynamic section size from wrap() · 25a00ab9
      Vivek Das Mohapatra authored
      When munging the ELF data structures from the capsule-export code path
      via dl_iterate_phdr, we get the dynamic section size as a callback arg
      so we can double-check we haven't ended up outside the memory region
      we expect to be working on.
      
      Unfortunately when using link_map traversal to do the same sort of thing
      to install wrapper functions inside the capsule we don't have this
      information. We were using SIZE_MAX on ELFCLASS64 to pass a "big enough"
      size parameter but this calculation does not work on ELFCLASS32.
      
      Rather than go out of our way to produce a bogus-but-big-enough value
      we now pass 0 for the size and have the called functions know that they
      can't do the double-check if passed a size of 0.
      
      The last entry in the dyn section should have a D_TAG of DT_NULL
      anyway so we'll only crash off the end of the dynamic section if
      the linker is broken or malicious (which is probably not worth
      defending against, all things considered).
      25a00ab9
  18. 23 May, 2017 3 commits