diff options
| author | Russell King <rmk+kernel@arm.linux.org.uk> | 2013-07-04 06:40:32 -0400 |
|---|---|---|
| committer | Russell King <rmk+kernel@arm.linux.org.uk> | 2013-07-31 16:31:36 -0400 |
| commit | 19accfd373847ac3d10623c5d20f948846299741 (patch) | |
| tree | 682dd44ea1710afbb7e61a24185ffa4c9a0fb0da /arch/arm/Kconfig | |
| parent | 5b43e7a383d69381ffe53423e46dd0fafae07da3 (diff) | |
ARM: move vector stubs
Move the machine vector stubs into the page above the vector page,
which we can prevent from being visible to userspace. Also move
the reset stub, and place the swi vector at a location that the
'ldr' can get to it.
This hides pointers into the kernel which could give valuable
information to attackers, and reduces the number of exploitable
instructions at a fixed address.
Cc: <stable@vger.kernel.org>
Acked-by: Nicolas Pitre <nico@linaro.org>
Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
Diffstat (limited to 'arch/arm/Kconfig')
| -rw-r--r-- | arch/arm/Kconfig | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig index ba412e02ec0c..123b7924904f 100644 --- a/arch/arm/Kconfig +++ b/arch/arm/Kconfig | |||
| @@ -218,7 +218,8 @@ config VECTORS_BASE | |||
| 218 | default DRAM_BASE if REMAP_VECTORS_TO_RAM | 218 | default DRAM_BASE if REMAP_VECTORS_TO_RAM |
| 219 | default 0x00000000 | 219 | default 0x00000000 |
| 220 | help | 220 | help |
| 221 | The base address of exception vectors. | 221 | The base address of exception vectors. This must be two pages |
| 222 | in size. | ||
| 222 | 223 | ||
| 223 | config ARM_PATCH_PHYS_VIRT | 224 | config ARM_PATCH_PHYS_VIRT |
| 224 | bool "Patch physical to virtual translations at runtime" if EMBEDDED | 225 | bool "Patch physical to virtual translations at runtime" if EMBEDDED |