Date: Tue, 31 Jan 2006 13:42:23 -0500 From: Kris Kennaway <kris@obsecurity.org> To: Pawel Jakub Dawidek <pjd@FreeBSD.org> Cc: kris@FreeBSD.org, freebsd-current@FreeBSD.org Subject: Re: cvs commit: src/sys/kern kern_malloc.c src/share/man/man9 Makefile redzone.9 src/sys/vm redzone.c redzone.h src/sys/conf NOTES files options Message-ID: <20060131184223.GC10257@xor.obsecurity.org> In-Reply-To: <20060131151809.GE83051@garage.freebsd.pl> References: <200601311109.k0VB9MRq025366@repoman.freebsd.org> <20060131151809.GE83051@garage.freebsd.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Tue, Jan 31, 2006 at 04:18:09PM +0100, Pawel Jakub Dawidek wrote: > On Tue, Jan 31, 2006 at 11:09:22AM +0000, Pawel Jakub Dawidek wrote: > +> pjd 2006-01-31 11:09:22 UTC > +> > +> FreeBSD src repository > +> > +> Modified files: > +> sys/kern kern_malloc.c > +> share/man/man9 Makefile > +> sys/conf NOTES files options > +> Added files: > +> share/man/man9 redzone.9 > +> sys/vm redzone.c redzone.h > +> Log: > +> Add buffer corruption protection (RedZone) for kernel's malloc(9). > +> It detects both: buffer underflows and buffer overflows bugs at runtime > +> (on free(9) and realloc(9)) and prints backtraces from where memory was > +> allocated and from where it was freed. > +> > +> Tested by: kris > > As I noted above, Kris did some tests with redzone(9) enabled and haven't > found any issues. > > We may want to turn it on in HEAD by default for some time, so more code > can be tested. > > What do you think? Kris, is there visible overhead with redzone(9)? I haven't really tested that, but it doesn't seem too bad. I think it would be well worth leaving it on for a while to see what turns up though. Kris [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQFD36+OWry0BWjoQKURAlmUAJ9bNDspx3O9fZutQ4Gp61jJ/0powgCfUe42 f8jPHS3YWKU3ysQ5GSRmldA= =iv0m -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060131184223.GC10257>