[krbdev.mit.edu #7813] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Wed Jan 8 22:30:41 EST 2014


Mark AESNI files as not needing executable stacks

Some Linux systems now come with facilities to mark the stack as
non-executable, making it more difficult to exploit buffer overrun
bugs.  For this to work, object files built from assembly need a
section added to note whether they require an executable stack.

Patch from Dhiru Kholia with comments added.  More information at:
https://bugzilla.redhat.com/show_bug.cgi?id=1045699
https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart

(cherry picked from commit c64e39c69a9a7ee32c00b0cf7918f6274a565544)

https://github.com/krb5/krb5/commit/1cc36f83ae13d91c255c92add19bbfea54a4e9a0
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 1cc36f83ae13d91c255c92add19bbfea54a4e9a0
Branch: krb5-1.12
 src/lib/crypto/builtin/aes/iaesx64.s |   11 +++++++++++
 src/lib/crypto/builtin/aes/iaesx86.s |   11 +++++++++++
 2 files changed, 22 insertions(+), 0 deletions(-)



More information about the krb5-bugs mailing list