Eric Dumazet 314beb9bca x86: bpf_jit_comp: secure bpf jit against spraying attacks ... hpa bringed into my attention some security related issues with BPF JIT on x86. This patch makes sure the bpf generated code is marked read only, as other kernel text sections. It also splits the unused space (we vmalloc() and only use a fraction of the page) in two parts, so that the generated bpf code not starts at a known offset in the page, but a pseudo random one. Refs: http://mainisusuallyafunction.blogspot.com/2012/11/attacking-hardened-linux-systems-with.html Reported-by: H. Peter Anvin <hpa@zytor.com> Signed-off-by: Eric Dumazet <edumazet@google.com> Reviewed-by: Daniel Borkmann <dborkman@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-05-19 23:55:41 -07:00
..
alpha	Removal of GENERIC_GPIO for v3.10	2013-05-09 09:59:16 -07:00
arc	Aliasing VIPT dcache support for ARC	2013-05-10 07:24:14 -07:00
arm	ARM: exynos: dts: Fixed vbus-gpios	2013-05-09 13:25:23 -07:00
arm64	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal	2013-05-10 09:21:05 -07:00
avr32	Removal of GENERIC_GPIO for v3.10	2013-05-09 09:59:16 -07:00
blackfin	blackfin updates for Linux 3.10	2013-05-10 07:21:16 -07:00
c6x	dump_stack: unify debug information printed by show_regs()	2013-04-30 17:04:02 -07:00
cris	- Lots of cleanups from Artem, including deletion of some obsolete drivers	2013-05-09 10:15:46 -07:00
frv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-05-01 14:08:52 -07:00
h8300	We get rid of the general module prefix confusion with a binary config option,	2013-05-05 10:58:06 -07:00
hexagon	Removal of GENERIC_GPIO for v3.10	2013-05-09 09:59:16 -07:00
ia64	Removal of GENERIC_GPIO for v3.10	2013-05-09 09:59:16 -07:00
m32r	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-05-01 14:08:52 -07:00
m68k	- Artem's removal of dead code continues (RPX, MBX860)	2013-05-10 09:09:47 -07:00
metag	Removal of GENERIC_GPIO for v3.10	2013-05-09 09:59:16 -07:00
microblaze	Merge branch 'next' of git://git.monstr.eu/linux-2.6-microblaze	2013-05-10 07:19:52 -07:00
mips	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal	2013-05-10 09:21:05 -07:00
mn10300	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2013-05-01 14:08:52 -07:00
openrisc	Removal of GENERIC_GPIO for v3.10	2013-05-09 09:59:16 -07:00
parisc	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal	2013-05-10 09:21:05 -07:00
powerpc	Merge git://git.infradead.org/users/eparis/audit	2013-05-11 14:29:11 -07:00
s390	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal	2013-05-10 09:21:05 -07:00
score	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
sh	Removal of GENERIC_GPIO for v3.10	2013-05-09 09:59:16 -07:00
sparc	sparc: bpf_jit_comp: can call module_free() from any context	2013-05-17 18:27:52 -07:00
tile	Merge branch 'stable' of git://git.kernel.org/pub/scm/linux/kernel/git/cmetcalf/linux-tile	2013-05-09 14:34:58 -07:00
um	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-07 15:14:53 -07:00
unicore32	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal	2013-05-10 09:21:05 -07:00
x86	x86: bpf_jit_comp: secure bpf jit against spraying attacks	2013-05-19 23:55:41 -07:00
xtensa	Xtensa patchset for v3.10-rc1	2013-05-09 14:38:16 -07:00
.gitignore
Kconfig	We get rid of the general module prefix confusion with a binary config option,	2013-05-05 10:58:06 -07:00