Stack protector: leak of guard's address on stack
Florian Weimer
fw@deneb.enyo.de
Sun Apr 29 07:50:00 GMT 2018
* Thomas Preudhomme:
> Yes absolutely, CSE needs to be avoided. I made memory access volatile
> because the change was easier to do. Also on Arm Thumb-1 computing the
> guard's address itself takes several loads so had to modify some more
> patterns. Anyway, regardless of the proper fix, do you have any objection
> to raising a CVE for that issue?
Please file a bug in Bugzilla first and use that in the submission to
MITRE.
More information about the Gcc
mailing list