graphene

mirror of https://github.com/clearlinux/graphene.git synced 2026-09-06 13:51:28 +00:00

Files

T

History

Don Porter c68cb42e20 Address a TOCTTOU vulnerability in SGX read/map (#131 )

* Fix a bug where configuration error ends up doing a huge allocation, rather than catching the error.  Add some documentation to the slabmgr code.

* Add a unit test and some documentation to answer the question in issue #107.  I can't see how offset and map_start would end up being different.

* Rewrite of SGX file_map to remove TOCTTTOU now passes all unit tests

* Apply a similar fix to file_read.

* Factor complicated verification code into a common helper routine.

* Adjust the memory copying strategy so that all bits in the returned buffed are exactly the same bits as verified in the trusted, scratch buffer.

* Fixing the TOCTOU issue in file checking

* Adding comments for load_trusted_file() and copy_and_check_trusted_file(); Deprecate the old design

* Documenting the file checking mechanism

2018-10-24 14:51:06 -04:00

include

Drop another unused header

2018-08-13 10:08:57 -04:00

ipc/linux

add Graphene-SGX building and non-SGX regression tests into .travis.yml

2018-08-13 10:11:19 -04:00

lib

Address a TOCTTOU vulnerability in SGX read/map (#131 )

2018-10-24 14:51:06 -04:00

linux-kernel/graphene

bugfix: process forking in LibOS