07 Nov, 2017

1 commit

  • Currently we are leaking addresses from the kernel to user space. This
    script is an attempt to find some of those leakages. Script parses
    `dmesg` output and /proc and /sys files for hex strings that look like
    kernel addresses.

    Only works for 64 bit kernels, the reason being that kernel addresses on
    64 bit kernels have 'ffff' as the leading bit pattern making greping
    possible. On 32 kernels we don't have this luxury.

    Scripts is _slightly_ smarter than a straight grep, we check for false
    positives (all 0's or all 1's, and vsyscall start/finish addresses).

    [ I think there is a lot of room for improvement here, but it's already
    useful, so I'm merging it as-is. The whole "hash %p format" series is
    expected to go into 4.15, but will not fix %x users, and will not
    incentivize people to look at what they are leaking. - Linus ]

    Signed-off-by: Tobin C. Harding
    Signed-off-by: Linus Torvalds

    Tobin C. Harding