Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 21 May 2021 09:37:14 -0400
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Marcin Wojtas <mw@FreeBSD.org>
Cc:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org
Subject:   Re: git: af949c590bd8 - main - Disable stack gap for ntpd during build.
Message-ID:  <20210521133714.g5qpcs5wd4q27tya@mutt-hbsd>
In-Reply-To: <202105211334.14LDYqoa004343@gitrepo.freebsd.org>
References:  <202105211334.14LDYqoa004343@gitrepo.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--acbqqhcrzins2o5s
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, May 21, 2021 at 01:34:52PM +0000, Marcin Wojtas wrote:
> The branch main has been updated by mw:
>=20
> URL: https://cgit.FreeBSD.org/src/commit/?id=3Daf949c590bd8a00a5973b5875d=
7e0fa6832ea64a
>=20
> commit af949c590bd8a00a5973b5875d7e0fa6832ea64a
> Author:     Marcin Wojtas <mw@FreeBSD.org>
> AuthorDate: 2021-05-21 09:29:22 +0000
> Commit:     Marcin Wojtas <mw@FreeBSD.org>
> CommitDate: 2021-05-21 13:33:06 +0000
>=20
>     Disable stack gap for ntpd during build.
>    =20
>     When starting, ntpd calls setrlimit(2) to limit maximum size of its
>     stack. The stack limit chosen by ntpd is 200K, so when stack gap
>     is enabled, the stack gap is larger than this limit, which results
>     in ntpd crashing.

Would it make sense to update the stack limit enforcement code to take
the stack gap into account? I haven't looked at HardenedBSD's stack
randomization for a while, but if memory serves correctly, we made
that change.

Thanks,

--=20
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A=
4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

--acbqqhcrzins2o5s
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=OVVc
-----END PGP SIGNATURE-----

--acbqqhcrzins2o5s--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20210521133714.g5qpcs5wd4q27tya>