Stack protector: leak of guard's address on stack

Florian Weimer fw@deneb.enyo.de
Sun Apr 29 07:50:00 GMT 2018


* Thomas Preudhomme:

> Yes absolutely, CSE needs to be avoided. I made memory access volatile
> because the change was easier to do. Also on Arm Thumb-1 computing the
> guard's address itself takes several loads so had to modify some more
> patterns. Anyway, regardless of the proper fix, do you have any objection
> to raising a CVE for that issue?

Please file a bug in Bugzilla first and use that in the submission to
MITRE.



More information about the Gcc mailing list