On Wed, Jul 13, 2016 at 3:01 PM, Andy Lutomirski [off-list ref] wrote:

On Wed, Jul 13, 2016 at 2:55 PM, Kees Cook [off-list ref] wrote:

quoted

This creates per-architecture function arch_within_stack_frames() that
should validate if a given object is contained by a kernel stack frame.
Initial implementation is on x86.

This is based on code from PaX.

This, along with Josh's livepatch work, are two examples of unwinders
that matter for correctness instead of just debugging.  ISTM this
should just use Josh's code directly once it's been written.

Do you have URL for Josh's code? I'd love to see what happening there.

In the meantime, usercopy can use this...

-Kees

-- 
Kees Cook
Chrome OS & Brillo Security