It appears that the stackframe layout can be slightly different depending on
compiler and target architecture. For example, when using CHERI LLVM for RISC-V
we can actually overflow the buffer by up to 8 bytes without SSP detecting it.
Fix this by increasing the overflow to 15 bytes.
Details
Details
Diff Detail
Diff Detail
- Repository
- rG FreeBSD src repository
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
Comment Actions
I think this is reasonable. I don't think we care whether SSP detects a stack overflow that overwrites only padding.
contrib/netbsd-tests/lib/libc/ssp/t_ssp.sh | ||
---|---|---|
397 | I wonder if this consistently works on NetBSD? |
contrib/netbsd-tests/lib/libc/ssp/t_ssp.sh | ||
---|---|---|
397 | Unlikely. |