Re: [edk2] [PATCH v2 0/5] RFC: increased memory protection

2017-02-27 Thread Laszlo Ersek
implementation in "MdeModulePkg/Library/DxeCoreMemoryAllocationLib/MemoryAllocationLib.c"), it won't even leak memory (as opposed to usage in PEIMs, where FreePool() does nothing). An example that uses this library for sorting can be found in "OvmfPkg/Library/QemuBootOrderLib/ExtraRootBu

Re: [edk2] [PATCH v2 0/5] RFC: increased memory protection

2017-02-26 Thread Ard Biesheuvel
performs a bubble sort :-( And BaseSortLib cannot be used in DXE_CORE modules. In any case, I will proceed with respinning these patches, Thanks for the feedback, Ard. >> -Original Message- >> From: edk2-devel [mailto:edk2-devel-boun...@lists.01.org] On Behalf Of Ard >&g

[edk2] [PATCH v2 0/5] RFC: increased memory protection

2017-02-24 Thread Ard Biesheuvel
Hello all, This is a proof of concept implementation that removes all executable permissions from writable memory regions, which greatly enhances security. It is based on Jiewen's recent work, which is a step in the right direction, but still leaves most of memory exploitable due to the default