diff options
author | Eric Sandeen <sandeen@sandeen.net> | 2008-04-22 17:38:23 -0400 |
---|---|---|
committer | Thomas Gleixner <tglx@linutronix.de> | 2008-05-26 10:15:33 -0400 |
commit | 7c9f8861e6c9c839f913e49b98c3854daca18f27 (patch) | |
tree | 220b23dff1aa11a83546fbc73a319575ca489188 /kernel/sched.c | |
parent | b40a4392a3c262e0d1b5379b4e142a8eefa63439 (diff) |
stackprotector: use canary at end of stack to indicate overruns at oops time
(Updated with a common max-stack-used checker that knows about
the canary, as suggested by Joe Perches)
Use a canary at the end of the stack to clearly indicate
at oops time whether the stack has ever overflowed.
This is a very simple implementation with a couple of
drawbacks:
1) a thread may legitimately use exactly up to the last
word on the stack
-- but the chances of doing this and then oopsing later seem slim
2) it's possible that the stack usage isn't dense enough
that the canary location could get skipped over
-- but the worst that happens is that we don't flag the overrun
-- though this happens fairly often in my testing :(
With the code in place, an intentionally-bloated stack oops might
do:
BUG: unable to handle kernel paging request at ffff8103f84cc680
IP: [<ffffffff810253df>] update_curr+0x9a/0xa8
PGD 8063 PUD 0
Thread overran stack or stack corrupted
Oops: 0000 [1] SMP
CPU 0
...
... unless the stack overrun is so bad that it corrupts some other
thread.
Signed-off-by: Eric Sandeen <sandeen@redhat.com>
Signed-off-by: Ingo Molnar <mingo@elte.hu>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Diffstat (limited to 'kernel/sched.c')
-rw-r--r-- | kernel/sched.c | 7 |
1 files changed, 1 insertions, 6 deletions
diff --git a/kernel/sched.c b/kernel/sched.c index cfa222a91539..a964ed945094 100644 --- a/kernel/sched.c +++ b/kernel/sched.c | |||
@@ -5748,12 +5748,7 @@ void sched_show_task(struct task_struct *p) | |||
5748 | printk(KERN_CONT " %016lx ", thread_saved_pc(p)); | 5748 | printk(KERN_CONT " %016lx ", thread_saved_pc(p)); |
5749 | #endif | 5749 | #endif |
5750 | #ifdef CONFIG_DEBUG_STACK_USAGE | 5750 | #ifdef CONFIG_DEBUG_STACK_USAGE |
5751 | { | 5751 | free = stack_not_used(p); |
5752 | unsigned long *n = end_of_stack(p); | ||
5753 | while (!*n) | ||
5754 | n++; | ||
5755 | free = (unsigned long)n - (unsigned long)end_of_stack(p); | ||
5756 | } | ||
5757 | #endif | 5752 | #endif |
5758 | printk(KERN_CONT "%5lu %5d %6d\n", free, | 5753 | printk(KERN_CONT "%5lu %5d %6d\n", free, |
5759 | task_pid_nr(p), task_pid_nr(p->real_parent)); | 5754 | task_pid_nr(p), task_pid_nr(p->real_parent)); |