[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Preview: portable dumper
From: |
Daniel Colascione |
Subject: |
Re: Preview: portable dumper |
Date: |
Tue, 29 Nov 2016 16:37:45 -0800 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) |
On Tue, Nov 29 2016, Paul Eggert wrote:
> On 11/29/2016 01:50 PM, Daniel Colascione wrote:
>> * We do store function pointers in the dump, and an attacker could
>> theoretically overwrite one of these to point where she wanted --- but
>> with all PROT_EXEC code in the process being randomized, where would
>> she point the function pointer that's under her control?
>
> I'm more worried about the next level up. Although the dump is pure
> data to the machine, it's not pure data to Elisp. Since the dump would
> contain bytecodes, if attackers can alter the bytecodes then they can
> execute whatever Elisp code they want.
Good point. How about this? We'll let the PIC-ness of the Emacs
executable (which we know at build time) control whether we try to map
the dump at its preferred load address. If a user is running non-PIC,
he's already vulnerable.
- Re: Preview: portable dumper, (continued)
- Re: Preview: portable dumper, Paul Eggert, 2016/11/28
- Re: Preview: portable dumper, Stefan Monnier, 2016/11/28
- Re: Preview: portable dumper, Daniel Colascione, 2016/11/28
- Re: Preview: portable dumper, Stefan Monnier, 2016/11/29
- Re: Preview: portable dumper, Daniel Colascione, 2016/11/29
- Re: Preview: portable dumper, Paul Eggert, 2016/11/29
- Re: Preview: portable dumper, Daniel Colascione, 2016/11/29
- Re: Preview: portable dumper, Paul Eggert, 2016/11/29
- Re: Preview: portable dumper,
Daniel Colascione <=
- Re: Preview: portable dumper, Paul Eggert, 2016/11/30
- Re: Preview: portable dumper, Stefan Monnier, 2016/11/30
- Re: Preview: portable dumper, Richard Stallman, 2016/11/30
- Re: Preview: portable dumper, Daniel Colascione, 2016/11/30
- Re: Preview: portable dumper, Stefan Monnier, 2016/11/29
- Re: Preview: portable dumper, Philipp Stephani, 2016/11/29
- Re: Preview: portable dumper, Paul Eggert, 2016/11/29
Preview: portable dumper, Tobias Gerdin, 2016/11/30