[krbdev.mit.edu #7813] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Fri Jan 3 20:05:07 EST 2014


Mark AESNI files as not needing executable stacks

Some Linux systems now come with facilities to mark the stack as
non-executable, making it more difficult to exploit buffer overrun
bugs.  For this to work, object files built from assembly need a
section added to note whether they require an executable stack.

Patch from Dhiru Kholia with comments added.  More information at:
https://bugzilla.redhat.com/show_bug.cgi?id=1045699
https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart

https://github.com/krb5/krb5/commit/c64e39c69a9a7ee32c00b0cf7918f6274a565544
Author: Greg Hudson <ghudson at mit.edu>
Commit: c64e39c69a9a7ee32c00b0cf7918f6274a565544
Branch: master
 src/lib/crypto/builtin/aes/iaesx64.s |   11 +++++++++++
 src/lib/crypto/builtin/aes/iaesx86.s |   11 +++++++++++
 2 files changed, 22 insertions(+), 0 deletions(-)



More information about the krb5-bugs mailing list