diff options
| author | Richard Sandiford <richard.sandiford@arm.com> | 2020-08-06 19:19:41 +0100 |
|---|---|---|
| committer | Richard Sandiford <richard.sandiford@arm.com> | 2020-08-06 19:19:41 +0100 |
| commit | 6a3f3e08723063ea2dadb7ddf503f02972a724e2 (patch) | |
| tree | f821ca505e67f83acdea248bc5439ed8e5c5b09c /libstdc++-v3/src | |
| parent | 6a13a4e3f29fc4ce5eff96d74ba965c9fdc02184 (diff) | |
| download | gcc-6a3f3e08723063ea2dadb7ddf503f02972a724e2.zip gcc-6a3f3e08723063ea2dadb7ddf503f02972a724e2.tar.gz gcc-6a3f3e08723063ea2dadb7ddf503f02972a724e2.tar.bz2 | |
arm: Clear canary value after stack_protect_test [PR96191]
The stack_protect_test patterns were leaving the canary value in the
temporary register, meaning that it was often still in registers on
return from the function. An attacker might therefore have been
able to use it to defeat stack-smash protection for a later function.
gcc/
PR target/96191
* config/arm/arm.md (arm_stack_protect_test_insn): Zero out
operand 2 after use.
* config/arm/thumb1.md (thumb1_stack_protect_test_insn): Likewise.
gcc/testsuite/
* gcc.target/arm/stack-protector-1.c: New test.
* gcc.target/arm/stack-protector-2.c: Likewise.
Diffstat (limited to 'libstdc++-v3/src')
0 files changed, 0 insertions, 0 deletions