oss-sec mailing list archives

Re: Qualys Security Advisory - The Stack Clash


From: Florian Weimer <fweimer () redhat com>
Date: Thu, 22 Jun 2017 12:19:35 +0200

On 06/22/2017 08:00 AM, Daniel Micay wrote:
Is it planned to have glibc use a larger 1M gap for secondary stacks
rather than a single guard page? That would be a *lot* easier than it
was to set it up for the main thread stack. It follows the main thread
stack rlimit as a guideline so it seems to make sense to use the same
guard region size too. If it ends up exposed as a sysctl, it could read
the current value from there.

On the glibc side, we are waiting for the kernel interface for the
configurable gap size to materialize upstream.

Thanks,
Florian


Current thread: