Don Porter c68cb42e20 Address a TOCTTOU vulnerability in SGX read/map (#131) ...

* Fix a bug where configuration error ends up doing a huge allocation, rather than catching the error.  Add some documentation to the slabmgr code.

* Add a unit test and some documentation to answer the question in issue #107.  I can't see how offset and map_start would end up being different.

* Rewrite of SGX file_map to remove TOCTTTOU now passes all unit tests

* Apply a similar fix to file_read.

* Factor complicated verification code into a common helper routine.

* Adjust the memory copying strategy so that all bits in the returned buffed are exactly the same bits as verified in the trusted, scratch buffer.

* Fixing the TOCTOU issue in file checking

* Adding comments for load_trusted_file() and copy_and_check_trusted_file(); Deprecate the old design

* Documenting the file checking mechanism

2018-10-24 14:51:06 -04:00

..

graphene

Lots of bugfixes (#145)

2018-10-24 11:56:24 -04:00

network

release v0.3

2015-11-30 08:38:50 -05:00

stdlib

bugfix: snprintf returns wrong # of written characters; and can potentially go overflow

2016-08-23 15:26:27 -04:00

string

beta version 0.2

2015-05-20 14:15:52 -04:00

api.h

Address a TOCTTOU vulnerability in SGX read/map (#131)

2018-10-24 14:51:06 -04:00

linux_list.h

The first official release

2014-06-02 12:45:42 -04:00

Makefile

This header (asm-errlist.h) is not used in the rest of the code. Remove it.

2018-08-13 10:09:07 -04:00

memmgr.h

release v0.3

2015-11-30 08:38:50 -05:00

slabmgr.h

Error propagation bugfix in PAL initialization (#114)

2018-10-24 14:08:56 -04:00