CONFIG_INIT_STACK_ALL_PATTERN: pattern-init everything (strongest)

General informations

The Linux kernel configuration item CONFIG_INIT_STACK_ALL_PATTERN has multiple definitions:

pattern-init everything (strongest) found in security/Kconfig.hardening

The configuration item CONFIG_INIT_STACK_ALL_PATTERN:

• prompt: pattern-init everything (strongest)
• type: bool
• depends on: ( CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN ) && (! CONFIG_KMSAN )
• defined in security/Kconfig.hardening
• found in Linux kernels: 5.15–5.19, 6.0–6.16

Help text

Initializes everything on the stack (including padding) with a specific debug value. This is intended to eliminate all classes of uninitialized stack variable exploits and information exposures, even variables that were warned about having been left uninitialized.

Pattern initialization is known to provoke many existing bugs related to uninitialized locals, e.g. pointers receive non-NULL values, buffer sizes and indices are very big. The pattern is situation-specific; Clang on 64-bit uses 0xAA repeating for all types and padding except float and double which use 0xFF repeating (-NaN). Clang on 32-bit uses 0xFF repeating for all types and padding. GCC uses 0xFE repeating for all types, and zero for padding.

0xAA-init everything on the stack (strongest) found in security/Kconfig.hardening

The configuration item CONFIG_INIT_STACK_ALL_PATTERN:

• prompt: 0xAA-init everything on the stack (strongest)
• type: bool
• depends on: CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN
• defined in security/Kconfig.hardening
• found in Linux kernels: 5.9–5.14

Help text

Initializes everything on the stack with a 0xAA pattern. This is intended to eliminate all classes of uninitialized stack variable exploits and information exposures, even variables that were warned to have been left uninitialized.

Pattern initialization is known to provoke many existing bugs related to uninitialized locals, e.g. pointers receive non-NULL values, buffer sizes and indices are very big.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: