RFC: Shadow Stack support in glibc

Szabolcs Nagy szabolcs.nagy@arm.com
Fri Jun 9 11:15:00 GMT 2017


On 09/06/17 12:13, H.J. Lu wrote:
> On Fri, Jun 9, 2017 at 2:05 AM, Szabolcs Nagy <szabolcs.nagy@arm.com> wrote:
>>
>> fixing setjmp/longjmp is non-trivial since jmpbuf size is abi,
>> it may be possible to do without saving ssp into jmpbuf though.
>>
> 
> Shadow stack is enabled at run-time only if all sources are compiled
> with shadow stack enabled compiler against shadow stack enabled
> glibc.  setjmp/longjmp are implemented with IFUNC, which uses
> the old setjmp/longjmp if shadow stack is off and uses the new
> setjmp/longjmp if shadow stack is on.
> 

that is not enough.

jmpbuf may be used in user code independently of setjmp/longjmp.




More information about the Libc-alpha mailing list