Fix: bytecode validator: reject specialized load field/context ref instructions
authorMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Fri, 30 Sep 2022 14:20:29 +0000 (10:20 -0400)
committerMathieu Desnoyers <mathieu.desnoyers@efficios.com>
Fri, 30 Sep 2022 15:36:58 +0000 (11:36 -0400)
commit969715b55504a3ef775b6ecd6c162d40e8063b62
treee2cc52b301d5ba9395d52ed16cd8e2b0e70a4875
parentbddade91e51d3f26fef22c7fe5dca5b22d59012a
Fix: bytecode validator: reject specialized load field/context ref instructions

Reject specialized load ref and get context ref instructions so a
bytecode crafted with nefarious intent cannot read a memory area larger
than the memory targeted by the instrumentation.

This prevents bytecode received from the session daemon from performing
out of bound memory accesses and from disclosing the content of
application memory beyond what has been targeted by the instrumentation.

Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
Change-Id: Ica16b97167d391d86e73b05fbf0210ff52b9c9f1
src/lib/lttng-ust/lttng-bytecode-validator.c
src/lib/lttng-ust/lttng-bytecode.c
src/lib/lttng-ust/lttng-bytecode.h
This page took 0.02469 seconds and 4 git commands to generate.