denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Strictly memwipe_check() for magic only in the affected buffer

Browse Source 
Passing back the buffer address we memwipe() is not ideal, as it could, in
theory, change the behavior of the compiler and not-optimize memwipe(). But
as checking a larger stack is very difficult for different architectures
and compilers, we do it nonetheless for now.
This commit is contained in:
Martin Willi
2013-06-05 15:02:18 +02:00
parent c480b5f458
commit bc1c92c9e9
1 changed files with 8 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/library.c
+8 -25
View File
@@ -155,21 +155,15 @@ static bool equals(char *a, char *b)
*/
#define MEMWIPE_WIPE_WORDS 16
/**
* Number of words we check stack for memwiped magic
*/
#define MEMWIPE_CHECK_WORDS (MEMWIPE_WIPE_WORDS * 2)
/**
* Write magic to memory, and try to clear it with memwipe()
*/
__attribute__((noinline))
static void do_magic(int *magic, int **stack)
static void do_magic(int *magic, int **out)
{
int buf[MEMWIPE_WIPE_WORDS], i;
/* tell caller where callee stack is (but don't point to buf) */
*stack = &i;
*out = buf;
for (i = 0; i < countof(buf); i++)
{
buf[i] = *magic;
@@ -185,27 +179,16 @@ static void do_magic(int *magic, int **stack)
*/
static bool check_memwipe()
{
int magic = 0xCAFEBABE, *ptr, *deeper, i, stackdir = 1;
int magic = 0xCAFEBABE, *buf, i;
do_magic(&magic, &deeper);
do_magic(&magic, &buf);
ptr = &magic;
if (deeper < ptr)
{ /* stack grows down */
stackdir = -1;
}
for (i = 0; i < MEMWIPE_CHECK_WORDS; i++)
for (i = 0; i < MEMWIPE_WIPE_WORDS; i++)
{
ptr = ptr + stackdir;
if (*ptr == magic)
if (buf[i] == magic)
{
ptr = &magic + stackdir;
if (stackdir == -1)
{
ptr -= MEMWIPE_CHECK_WORDS;
}
DBG1(DBG_LIB, "memwipe() check failed: stackdir: %d %b",
stackdir, ptr, (u_int)(MEMWIPE_CHECK_WORDS * sizeof(int)));
DBG1(DBG_LIB, "memwipe() check failed: stackdir: %b",
buf, MEMWIPE_WIPE_WORDS * sizeof(int));
return FALSE;
}
}