Nico Weber df62e54d1e Kernel: Request random numbers for syscall stack noise in larger chunks (#3125) ...

Cuts time needed for `disasm /bin/id` from 2.5s to 1s -- identical
to the time it needs when not doing the random adjustment at all.

The downside is that it's now very easy to get the random offsets
with out-of-bounds reads, so it does make this mitigation less
effective.

2020-08-13 21:05:08 +02:00

6.9 KiB

Raw Blame History

View Raw