Fix: bytecode validator: reject specialized load field/context ref instructions
authorMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Fri, 30 Sep 2022 14:20:29 +0000 (10:20 -0400)
committerMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Fri, 30 Sep 2022 15:04:45 +0000 (11:04 -0400)
commit82235210bea4ed2e09bf485a49baf2db6287810f
tree05d432484bafa9217654a0326e14f7a78c637a11
parentc7ef2e7d2442e0620e439ddaa71c596437a5804c
Fix: bytecode validator: reject specialized load field/context ref instructions

Reject specialized load ref and get context ref instructions so a
bytecode crafted with nefarious intent cannot read a memory area larger
than the memory targeted by the instrumentation.

This prevents bytecode received from the session daemon from performing
out of bound memory accesses and from disclosing the content of
application memory beyond what has been targeted by the instrumentation.

Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
Change-Id: Ica16b97167d391d86e73b05fbf0210ff52b9c9f1
src/lib/lttng-ust/lttng-bytecode-validator.c
src/lib/lttng-ust/lttng-bytecode.c
src/lib/lttng-ust/lttng-bytecode.h
This page took 0.025233 seconds and 4 git commands to generate.