Re: [RFC PATCH v4 00/12] hardening: statically allocated protected memory

2019-02-12 Thread Kees Cook
On Mon, Feb 11, 2019 at 11:09 PM Igor Stoppa wrote: > wr_assign() does just that. > > However, reading again your previous mails, I realize that I might have > misinterpreted what you were suggesting. > > If the advice is to have also a default memset_user() which relies on > put_user(), but do no

Re: [RFC PATCH v4 00/12] hardening: statically allocated protected memory

2019-02-11 Thread Igor Stoppa
On 12/02/2019 03:26, Kees Cook wrote: On Mon, Feb 11, 2019 at 5:08 PM igor.sto...@gmail.com wrote: On Tue, 12 Feb 2019, 4.47 Kees Cook On Mon, Feb 11, 2019 at 4:37 PM Igor Stoppa wrote: On 12/02/2019 02:09, Kees Cook wrote: On Mon, Feb 11, 2019 at 3:28 PM Igor Stoppa wrote: It lo

Re: [RFC PATCH v4 00/12] hardening: statically allocated protected memory

2019-02-11 Thread Kees Cook
On Mon, Feb 11, 2019 at 5:08 PM igor.sto...@gmail.com wrote: > > > > On Tue, 12 Feb 2019, 4.47 Kees Cook > >> On Mon, Feb 11, 2019 at 4:37 PM Igor Stoppa wrote: >> > >> > >> > >> > On 12/02/2019 02:09, Kees Cook wrote: >> > > On Mon, Feb 11, 2019 at 3:28 PM Igor Stoppa >> > > wrote: >> > > It l

Re: [RFC PATCH v4 00/12] hardening: statically allocated protected memory

2019-02-11 Thread Kees Cook
On Mon, Feb 11, 2019 at 4:37 PM Igor Stoppa wrote: > > > > On 12/02/2019 02:09, Kees Cook wrote: > > On Mon, Feb 11, 2019 at 3:28 PM Igor Stoppa wrote: > > It looked like only the memset() needed architecture support. Is there > > a reason for not being able to implement memset() in terms of an >

Re: [RFC PATCH v4 00/12] hardening: statically allocated protected memory

2019-02-11 Thread Igor Stoppa
On 12/02/2019 02:09, Kees Cook wrote: On Mon, Feb 11, 2019 at 3:28 PM Igor Stoppa wrote: [...] Patch-set implementing write-rare memory protection for statically allocated data. It seems like this could be expanded in the future to cover dynamic memory too (i.e. just a separate base ran

Re: [RFC PATCH v4 00/12] hardening: statically allocated protected memory

2019-02-11 Thread Kees Cook
On Mon, Feb 11, 2019 at 3:28 PM Igor Stoppa wrote: > at last I'm able to resume work on the memory protection patchset I've > proposed some time ago. This version should address comments received so > far and introduce support for arm64. Details below. Cool! > Patch-set implementing write-rare m