Jiri Kosina c1d171a002 x86: randomize brk ... Randomize the location of the heap (brk) for i386 and x86_64. The range is randomized in the range starting at current brk location up to 0x02000000 offset for both architectures. This, together with pie-executable-randomization.patch and pie-executable-randomization-fix.patch, should make the address space randomization on i386 and x86_64 complete. Arjan says: This is known to break older versions of some emacs variants, whose dumper code assumed that the last variable declared in the program is equal to the start of the dynamically allocated memory region. (The dumper is the code where emacs effectively dumps core at the end of it's compilation stage; this coredump is then loaded as the main program during normal use) iirc this was 5 years or so; we found this way back when I was at RH and we first did the security stuff there (including this brk randomization). It wasn't all variants of emacs, and it got fixed as a result (I vaguely remember that emacs already had code to deal with it for other archs/oses, just ifdeffed wrongly). It's a rare and wrong assumption as a general thing, just on x86 it mostly happened to be true (but to be honest, it'll break too if gcc does something fancy or if the linker does a non-standard order). Still its something we should at least document. Note 2: afaik it only broke the emacs *build*. I'm not 100% sure about that (it IS 5 years ago) though. [ akpm@linux-foundation.org: deuglification ] Signed-off-by: Jiri Kosina <jkosina@suse.cz> Cc: Arjan van de Ven <arjan@infradead.org> Cc: Roland McGrath <roland@redhat.com> Cc: Jakub Jelinek <jakub@redhat.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Ingo Molnar <mingo@elte.hu> Signed-off-by: Thomas Gleixner <tglx@linutronix.de>		2008-01-30 13:30:40 +01:00
..
9p	9p: use copy of the options value instead of original	2007-11-06 08:02:53 -06:00
adfs	Slab API: remove useless ctor parameter and reorder parameters	2007-10-17 08:42:45 -07:00
affs	fs: mark nibblemap const	2007-10-17 08:42:47 -07:00
afs	vfs: Add 64 bit i_version support	2008-01-28 23:58:27 -05:00
autofs	Use task_pid_nr() instead of pid_nr(task_pid())	2007-10-19 11:53:43 -07:00
autofs4	pid namespaces: round up the API	2007-10-19 11:53:37 -07:00
befs	Slab API: remove useless ctor parameter and reorder parameters	2007-10-17 08:42:45 -07:00
bfs	regression: bfs endianness bug	2007-12-05 09:25:20 -08:00
cifs	[CIFS] DFS build fixes	2008-01-25 10:12:41 +00:00
coda	coda: convert struct class_device to struct device	2008-01-24 20:40:05 -08:00
configfs	configfs: file.c fix possible recursive locking	2008-01-25 15:05:47 -08:00
cramfs	fs/cramfs/inode.c: replace hardcoded value with preprocessor constant	2007-10-18 14:37:29 -07:00
debugfs	Kobject: convert fs/* from kobject_unregister() to kobject_put()	2008-01-24 20:40:40 -08:00
devpts
dlm	Kobject: convert fs/* from kobject_unregister() to kobject_put()	2008-01-24 20:40:40 -08:00
ecryptfs	[NETNS]: Consolidate kernel netlink socket destruction.	2008-01-28 15:08:07 -08:00
efs	exportfs: make struct export_operations const	2007-10-22 08:13:21 -07:00
exportfs	exportfs: update documentation	2007-10-22 08:13:21 -07:00
ext2	ext2: Fix the max file size for ext2 file system.	2008-01-28 23:58:26 -05:00
ext3	ext3: Fix the max file size for ext3 file system.	2008-01-28 23:58:26 -05:00
ext4	ext4: Use the ext4_ext_actual_len() helper function	2008-01-28 23:58:27 -05:00
fat	fat: optimize fat_count_free_clusters()	2008-01-08 16:10:35 -08:00
freevxfs	mm: Remove slab destructors from kmem_cache_create().	2007-07-20 10:11:58 +09:00
fuse	Kobject: convert fs/* from kobject_unregister() to kobject_put()	2008-01-24 20:40:40 -08:00
gfs2	Merge git://git.kernel.org/pub/scm/linux/kernel/git/steve/gfs2-2.6-nmw	2008-01-25 08:39:18 -08:00
hfs	hfs: fix coverity-found null deref	2008-01-17 15:38:58 -08:00
hfsplus	Slab API: remove useless ctor parameter and reorder parameters	2007-10-17 08:42:45 -07:00
hostfs	uml: fix hostfs style	2007-10-16 09:43:07 -07:00
hpfs	Slab API: remove useless ctor parameter and reorder parameters	2007-10-17 08:42:45 -07:00
hppfs
hugetlbfs	hugetlb: allow bulk updating in hugetlb_*_quota()	2007-11-14 18:45:40 -08:00
isofs	exportfs: make struct export_operations const	2007-10-22 08:13:21 -07:00
jbd	jbd: do not try lock_acquire after handle made invalid	2008-01-17 15:38:59 -08:00
jbd2	jbd2: sparse pointer use of zero as null	2008-01-28 23:58:27 -05:00
jffs2	Freezer: Fix JFFS2 garbage collector freezing issue (rev. 2)	2007-12-04 01:35:41 -05:00
jfs	mount options: fix jfs	2008-01-24 16:13:21 -06:00
lockd	NLM: Fix a bogus 'return' in nlmclnt_rpc_release	2008-01-30 02:06:08 -05:00
minix	limit minixfs printks on corrupted dir i_size	2007-10-17 08:42:53 -07:00
msdos
ncpfs	Slab API: remove useless ctor parameter and reorder parameters	2007-10-17 08:42:45 -07:00
nfs	NFSv4: Iterate through all nfs_clients when the server recalls a delegation	2008-01-30 02:06:12 -05:00
nfs_common
nfsd	knfsd: Allow NFSv2/3 WRITE calls to succeed when krb5i etc is used.	2008-01-13 09:57:57 -08:00
nls	sparse pointer use of zero as null	2007-10-18 14:37:31 -07:00
ntfs	NTFS: Fix read regression.	2007-11-03 12:27:21 -07:00
ocfs2	ocfs2: Fix userspace ABI breakage in sysfs	2008-01-28 19:10:23 -08:00
openpromfs	[SPARC]: Constify function pointer tables.	2008-01-22 18:29:20 -08:00
partitions	Kobject: convert fs/* from kobject_unregister() to kobject_put()	2008-01-24 20:40:40 -08:00
proc	[ATM]: Oops reading net/atm/arp	2008-01-28 15:01:36 -08:00
qnx4	Slab API: remove useless ctor parameter and reorder parameters	2007-10-17 08:42:45 -07:00
ramfs	Remove valueless definition of hard-selected RAMFS option	2007-10-17 08:42:56 -07:00
reiserfs	proc: fix proc_dir_entry refcounting	2007-12-05 09:21:20 -08:00
romfs	fs/romfs/inode.c: trivial improvements	2007-10-17 08:42:47 -07:00
smbfs	FS: Remove dead code	2008-01-28 23:14:37 +01:00
sysfs	Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-misc-2.6	2008-01-25 17:19:08 -08:00
sysv	Slab API: remove useless ctor parameter and reorder parameters	2007-10-17 08:42:45 -07:00
udf	fs/udf/balloc.c: mark a variable as uninitialized_var()	2007-10-17 08:43:00 -07:00
ufs	ufs: fix nexstep dir block size	2007-12-05 09:21:18 -08:00
vfat
xfs	[XFS] fix unaligned access in readdir	2008-01-11 18:05:04 +11:00
aio.c	aio: only account I/O wait time in read_events if there are active requests	2007-12-05 09:21:18 -08:00
anon_inodes.c	anon-inodes use open coded atomic_inc for the shared inode	2007-10-17 08:43:00 -07:00
attr.c	VFS: make notify_change pass ATTR_KILL_S*ID to setattr operations	2007-10-18 14:37:22 -07:00
bad_inode.c	sendfile: remove bad_sendfile() from bad_file_ops	2007-07-10 08:04:15 +02:00
binfmt_aout.c	mm: fix exit_mmap BUG() on a.out binary exit	2007-12-20 07:49:53 -08:00
binfmt_elf.c	x86: randomize brk	2008-01-30 13:30:40 +01:00
binfmt_elf_fdpic.c	pid namespaces: changes to show virtual ids to user	2007-10-19 11:53:40 -07:00
binfmt_em86.c	Convert files to UTF-8 and some cleanups	2007-10-19 23:21:04 +02:00
binfmt_flat.c	binfmt_flat: warning fixes	2007-10-17 08:42:54 -07:00
binfmt_misc.c	Convert files to UTF-8 and some cleanups	2007-10-19 23:21:04 +02:00
binfmt_script.c	Convert files to UTF-8 and some cleanups	2007-10-19 23:21:04 +02:00
binfmt_som.c	core_pattern: ignore RLIMIT_CORE if core_pattern is a pipe	2007-10-17 08:42:50 -07:00
bio.c	__bio_clone: don't calculate hw/phys segment counts	2008-01-28 10:04:46 +01:00
block_dev.c	Driver core: convert block from raw kobjects to core devices	2008-01-24 20:40:36 -08:00
buffer.c	Add buffer head related helper functions	2008-01-28 23:58:26 -05:00
char_dev.c	Kobject: rename kobject_init_ng() to kobject_init()	2008-01-24 20:40:38 -08:00
compat.c	security: call security_file_permission from rw_verify_area	2008-01-25 11:29:52 +11:00
compat_ioctl.c	remove __attribute_used__	2008-01-28 23:21:18 +01:00
dcache.c	dcache: don't expose uninitialized memory in /proc/<pid>/fd/<fd>	2007-10-22 08:13:18 -07:00
dcookies.c	Remove fs.h from mm.h	2007-07-29 17:09:29 -07:00
direct-io.c	remove ZERO_PAGE	2007-10-16 09:42:53 -07:00
dnotify.c	mm: Remove slab destructors from kmem_cache_create().	2007-07-20 10:11:58 +09:00
dquot.c	Don't send quota messages repeatedly when hardlimit reached	2007-12-23 12:54:36 -08:00
drop_caches.c	invalidate_mapping_pages(): add cond_resched	2007-07-16 09:05:36 -07:00
eventfd.c
eventpoll.c	fs/eventpoll.c: use list_for_each_entry() instead of list_for_each()	2007-10-19 11:53:38 -07:00
exec.c	vfs: coredumping fix	2007-11-28 10:58:01 -08:00
fcntl.c	pid namespaces: changes to show virtual ids to user	2007-10-19 11:53:40 -07:00
fifo.c
file.c
file_table.c	fs/file_table.c: use list_for_each_entry() instead of list_for_each()	2007-10-19 11:53:38 -07:00
filesystems.c
fs-writeback.c	Revert "writeback: introduce writeback_control.more_io to indicate more io"	2008-01-14 21:21:29 -08:00
generic_acl.c	Introduce is_owner_or_cap() to wrap CAP_FOWNER use with fsuid check	2007-07-17 12:00:03 -07:00
inode.c	ext4: Add inode version support in ext4	2008-01-28 23:58:27 -05:00
inotify.c	[PATCH] new helper - inotify_evict_watch()	2007-10-21 02:37:38 -04:00
inotify_user.c	change inotifyfs magic as the same magic is used for futexfs	2007-10-17 08:43:00 -07:00
internal.h
ioctl.c	drop obsolete sys_ioctl export	2007-07-16 09:05:48 -07:00
ioprio.c	cfq-iosched: relax IOPRIO_CLASS_IDLE restrictions	2008-01-28 11:38:15 +01:00
Kconfig	ext4: Add the journal checksum feature	2008-01-28 23:58:27 -05:00
Kconfig.binfmt
libfs.c	exportfs: add new methods	2007-10-22 08:13:19 -07:00
locks.c	locks: fix possible infinite loop in posix deadlock detection	2007-10-30 09:04:18 -07:00
Makefile	Remove valueless definition of hard-selected RAMFS option	2007-10-17 08:42:56 -07:00
mbcache.c	fs: Fix to correct the mbcache entries counter	2007-10-25 15:18:29 -07:00
mpage.c	mm: buffered write cleanup	2007-10-16 09:42:54 -07:00
namei.c	Use access mode instead of open flags to determine needed permissions	2008-01-12 14:47:58 -08:00
namespace.c	kobject: convert main fs kobject to use kobject_create	2008-01-24 20:40:13 -08:00
nfsctl.c	nfsctl: use vfs_path_lookup	2007-07-19 10:04:45 -07:00
no-block.c
open.c	mark sys_open/sys_read exports unused	2007-11-14 18:45:42 -08:00
pipe.c	sched: affine sync wakeups	2007-10-15 17:00:19 +02:00
pnode.c
pnode.h	[PATCH] new helpers - collect_mounts() and release_collected_mounts()	2007-10-21 02:37:25 -04:00
posix_acl.c
quota.c	[IA64] Fix build failure in fs/quota.c	2007-07-27 15:40:13 -07:00
quota_v1.c
quota_v2.c
read_write.c	ext4: export iov_shorten from kernel for ext4's use	2008-01-28 23:58:27 -05:00
read_write.h
readdir.c
select.c	fs/select, remove unused macros	2007-10-19 11:53:41 -07:00
seq_file.c	[FS] seq_file: Introduce the seq_open_private()	2007-10-10 16:55:33 -07:00
signalfd.c	rename signalfd_siginfo fields	2007-10-17 08:43:01 -07:00
splice.c	splice: fix problem with atime not being updated	2008-01-29 21:55:20 +01:00
stack.c
stat.c
super.c	Convert files to UTF-8 and some cleanups	2007-10-19 23:21:04 +02:00
sync.c
timerfd.c	make timerfd return a u64 and fix the __put_user	2007-07-26 11:35:17 -07:00
utimes.c	VFS: check nanoseconds in utimensat	2007-10-17 08:42:52 -07:00
xattr.c	[PATCH] pass dentry to audit_inode()/audit_inode_child()	2007-10-21 02:37:18 -04:00
xattr_acl.c