Speakers
Kees Cook
(Google)
Qing Zhao
Bill Wendling
(Google)
Description
Another year of work is behind us, with lots of progress across GCC, Clang, and Rust to provide the Linux kernel with a variety of security features. Let's review and discuss where we are with parity between toolchains, approaches to solving open problems, and exploring new features.
Parity reached since last year:
counted_byattribute for bounded Flexible Array Members (GCC, Clang)- language extension to support Flexible Array Member in Unions (GCC, Clang)
In progress:
-fbounds-safetylanguage extension (Clang)- arithmetic overflow protection via
-fsanitize=(un)signed-integer-overflow,-fsanitize=implicit-(un)signed-integer-truncation, and idiom exclusions (Clang) - improving
-Warray-boundswarnings (GCC)
Stalled, needs driving:
- forward edge Control Flow Integrity (GCC: KCFI)
- arbitrary stack protector guard location (Clang: RISC-V, PowerPC)
- Link Time Optimization (Kernel support for GCC)
- backward edge Control Flow Integrity (x86 CET Shadow Stack in kernel mode)
Primary author
Kees Cook
(Google)