Search results

KCFI support in GCC

[Compiler] GCCAn issue in GCC itself needs to be addressedAn issue in GCC itself needs to be addressed

[Feature] CFIInvolves Control Flow IntegrityInvolves Control Flow Integrity

[PATCH] SubmittedA patch has been submitted upstreamA patch has been submitted upstream

Status: Open.

#369 In KSPP/linux;

· kees opened on Feb 26, 2025

1 comment



KCFI: Support -fpatchable-function-entry=N,M where M > 0

[Compiler] ClangAn issue in Clang itself needs to be addressedAn issue in Clang itself needs to be addressed

[Feature] CFIInvolves Control Flow IntegrityInvolves Control Flow Integrity

enhancementNew feature or requestNew feature or request

Status: Open.

#366 In KSPP/linux;

· kees opened on Sep 22, 2024

KCFI: Allow distinguishing indirect functions with otherwise identical signature

[Compiler] ClangAn issue in Clang itself needs to be addressedAn issue in Clang itself needs to be addressed

[Feature] CFIInvolves Control Flow IntegrityInvolves Control Flow Integrity

enhancementNew feature or requestNew feature or request

Status: Open.

#365 In KSPP/linux;

· kees opened on Sep 22, 2024

1 comment



x86 KASLR base exposed due to lack of entry trampoline (EntryBleed, CVE-2022-4543)

[ARCH] x86_64Needed on the 64-bit x86 architecture (ARCH=x86)Needed on the 64-bit x86 architecture (ARCH=x86)

[Defense] information exposureProvide a defense for an information exposureProvide a defense for an information exposure

Status: Open.

#361 In KSPP/linux;

· kees opened on May 16, 2024

Finish converting greybus 0-sized arrays

[Refactor] 0-element arrayConversion away from zero-length arrayConversion away from zero-length array

Status: Open.

#349 In KSPP/linux;

· kees opened on Mar 4, 2024

2 comments

Overflow of unspecified length array in include/uapi/linux/lsm.h

Status: Open.

#347 In KSPP/linux;

· broonie opened on Dec 20, 2023

2 comments

Make mmap_rnd_bits_max dynamic based on paging level

[ARCH] riscvNeeded on the RISC-V architecture (ARCH=riscv)Needed on the RISC-V architecture (ARCH=riscv)

[ARCH] x86_64Needed on the 64-bit x86 architecture (ARCH=x86)Needed on the 64-bit x86 architecture (ARCH=x86)

[Feature] ASLRinvolves address space layout randomizationinvolves address space layout randomization

[PATCH] ExistsA patch exists to address the issueA patch exists to address the issue

userspace defenseThis defense is intended to improve the resilience of userspace programsThis defense is intended to improve the resilience of userspace programs

Status: Open.

#346 In KSPP/linux;

· kees opened on Sep 30, 2023

Mitigate arithmetic wrap-around (overflow and underflow)

Status: Open.

#345 In KSPP/linux;

· kees opened on Sep 15, 2023

2 comments

Detect pointer math wrap-around (overflow and underflow)

Status: Open.

#344 In KSPP/linux;

· kees opened on Sep 15, 2023

1 comment

get -Wformat-truncation and -Wformat-overflow re-enabled

Status: Open.

#343 In KSPP/linux;

· nickdesaulniers opened on Sep 13, 2023

1 comment

Add vzalloc() and vmalloc() functions to alloc-with-multiplies check in checkpatch.pl

Status: Open.

#342 In KSPP/linux;

· GustavoARSilva opened on Sep 12, 2023

1 comment



Address -Wstringop-overflow warning in arch/s390/kernel/setup.c

-Wstringop-overflowEmits warnings under -Wstringop-overflowEmits warnings under -Wstringop-overflow

Status: Open.

#340 In KSPP/linux;

· GustavoARSilva opened on Aug 17, 2023

1 comment

Refactor strncpy_from_user()

Status: Open.

#336 In KSPP/linux;

· JustinStitt opened on Aug 8, 2023

4 comments

Replace fake-flex array with flex-array member in drivers/hid/intel-ish-hid/ishtp-hid.h

[Idiom] fake flexible array

[Refactor] 1-element arrayConversion away from one-element arrayConversion away from one-element array

Status: Open.

#333 In KSPP/linux;

· GustavoARSilva opened on Aug 1, 2023

2 comments

Address -Warray-bounds warning in drivers/firmware/efi/libstub/zboot.c

-Warray-bounds

Status: Open.

#327 In KSPP/linux;

· GustavoARSilva opened on Jun 27, 2023

Address -Warray-bounds warning in drivers/base/arch_topology.c

-Warray-bounds

Status: Open.

#326 In KSPP/linux;

· GustavoARSilva opened on Jun 26, 2023

Address -Wuninitialized warnings in drivers/base/regmap/regcache-maple.c

-WuninitializedEmits warning under -WuninitializedEmits warning under -Wuninitialized

Status: Open.

#321 In KSPP/linux;

· GustavoARSilva opened on Jun 22, 2023

Address -Wframe-larger-than warnings in fs/mpage.c

-Wframe-larger-thanEmits warning under -Wframe-larger-thanEmits warning under -Wframe-larger-than

Status: Open.

#320 In KSPP/linux;

· GustavoARSilva opened on Jun 22, 2023

Address -Warray-bounds warnings in net/socket.c

-Warray-bounds

Status: Open.

#314 In KSPP/linux;

· GustavoARSilva opened on Jun 13, 2023

2 comments

Address -Warray-bounds warnings in fs/btrfs/sysfs.c

-Warray-bounds

Status: Open.

#313 In KSPP/linux;

· GustavoARSilva opened on Jun 13, 2023

2 comments

Fix -Wstringop-overflow warnings in drivers/net/wireless/realtek/rtw89/coex.c

-Wstringop-overflowEmits warnings under -Wstringop-overflowEmits warnings under -Wstringop-overflow

Status: Open.

#311 In KSPP/linux;

· GustavoARSilva opened on Jun 13, 2023

1 comment



use 48-bit address space via 4 level page tables on arm64 by default

Status: Open.

#284 In KSPP/linux;

· thestinger opened on Apr 22, 2023

argument block ASLR improvement

Status: Open.

#283 In KSPP/linux;

· thestinger opened on Apr 22, 2023

brk randomization improvements

Status: Open.

#282 In KSPP/linux;

· thestinger opened on Apr 22, 2023

random slab canaries with leading zero

Status: Open.

#281 In KSPP/linux;

· thestinger opened on Apr 22, 2023