CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2017/10/03 16:08:05
Modified files: sys/arch/amd64/amd64: Tag: OPENBSD_6_0 fpu.c locore.S trap.c Log message: The xrstor instruction will fault if the provided xstate data, which is under userspace control via sigreturn, fails various consistency checks. Rather than trying to replicate the CPU's hardwired checks in C code, handle it like iretq: check in trap() whether a fault is from the problem instruction and handle it there. CPU behavior and the potential issue pointed out on Linux kernel-hardening ok mikeb@ deraadt@ OpenBSD 6.0 errata 044