aboutsummaryrefslogtreecommitdiffstats
path: root/executor/test_kvm.cc
diff options
context:
space:
mode:
authorDmitry Vyukov <dvyukov@google.com>2017-01-25 11:01:30 +0100
committerDmitry Vyukov <dvyukov@google.com>2017-01-25 11:01:30 +0100
commitf810d0844478c385985e2d0fe0a6a603a7b1c8bd (patch)
tree6f1c5ff716e3e22d1f3cda7d681d349fd7f659fb /executor/test_kvm.cc
parent40723a067e2216f643485b732f90202b38b59e4b (diff)
executor: protect against memory corruptions better
Fuzzer has figured out how to corrupt input/output shmem regions abusing the text memcpy in syz_kvm_setup_cpu. It guessed a negative text_size value that causes the memcpy to overwrite shmem regions. Protect better against such cases: 1. Make text_size unsigned (there is already a check that it is less than 1000). 2. Map input region as readable only, we don't write to it. 3. Add address sanity check to segv_handler, if we see that we are writing into executable data, it's better to crash instantly.
Diffstat (limited to 'executor/test_kvm.cc')
0 files changed, 0 insertions, 0 deletions