F20 System Wide Change: ARM as primary Architecture

Brendan Conoboy blc at redhat.com
Thu Jul 11 18:52:34 UTC 2013


On 07/11/2013 11:49 AM, Jakub Jelinek wrote:
> Stack guards are present, but using libssp, which is the fallback way,
> second class citizen and most likely slower than the standard way.
> E.g. the libssp stack guard setup always uses /dev/urandom, while I guess
> even on ARM kernel provides AT_RANDOM that can be just used.
> And I'd bet that even on ARM reading the stack guard via TLS (well,
> static only always, i.e. hardcoded offset from TLS register), especially for
> PIC, is faster than doing GOT read and two memory references.

Thanks.  Security-wise, is the implementation roughly equivalent in what 
is protected against, albeit less efficient?

-- 
Brendan Conoboy / Red Hat, Inc. / blc at redhat.com


More information about the devel mailing list