arm-trusted-firmware

History

Douglas Raillard 51faada71a Add support for GCC stack protection Introduce new build option ENABLE_STACK_PROTECTOR. It enables compilation of all BL images with one of the GCC -fstack-protector-* options. A new platform function plat_get_stack_protector_canary() is introduced. It returns a value that is used to initialize the canary for stack corruption detection. Returning a random value will prevent an attacker from predicting the value and greatly increase the effectiveness of the protection. A message is printed at the ERROR level when a stack corruption is detected. To be effective, the global data must be stored at an address lower than the base of the stacks. Failure to do so would allow an attacker to overwrite the canary as part of an attack which would void the protection. FVP implementation of plat_get_stack_protector_canary is weak as there is no real source of entropy on the FVP. It therefore relies on a timer's value, which could be predictable. Change-Id: Icaaee96392733b721fa7c86a81d03660d3c1bc06 Signed-off-by: Douglas Raillard <douglas.raillard@arm.com>		8 years ago
..
aarch32	Replace ASM signed tests with unsigned	8 years ago
aarch64	Replace ASM signed tests with unsigned	8 years ago
cpus	Merge pull request #870 from douglas-raillard-arm/dr/remove_asm_signed_test	8 years ago
el3_runtime	Replace some memset call by zeromem	8 years ago
libfdt	libfdt: Replace v1.4.1 by v1.4.2	8 years ago
locks	AArch32: Fix normal memory bakery compilation	8 years ago
pmf	Add Performance Measurement Framework(PMF)	9 years ago
psci	PSCI: Optimize call paths if all participants are cache-coherent	8 years ago
semihosting	AArch32: Common changes needed for BL1/BL2	8 years ago
stack_protector	Add support for GCC stack protection	8 years ago
stdlib	stdlib: Import timingsafe_bcmp() from FreeBSD	8 years ago
xlat_tables	Add support to change xlat_tables to non-cacheable	8 years ago
xlat_tables_v2	Add support to change xlat_tables to non-cacheable	8 years ago