Re: [PATCH v6 3/4] arm64: mm: support ARCH_MMAP_RND_BITS.

2015-12-14 Thread Daniel Cashman
On 12/14/2015 03:19 AM, Will Deacon wrote: >> +# max bits determined by the following formula: >> +# VA_BITS - PAGE_SHIFT - 3 > > Now that we have this comment, I think we can drop the unsupported > combinations from the list below. That means we just end up with: > >> +config

Re: [PATCH v6 3/4] arm64: mm: support ARCH_MMAP_RND_BITS.

2015-12-14 Thread Will Deacon
Hi Daniel, On Fri, Dec 11, 2015 at 09:52:17AM -0800, Daniel Cashman wrote: > From: dcashman > > arm64: arch_mmap_rnd() uses STACK_RND_MASK to generate the > random offset for the mmap base address. This value represents a > compromise between increased ASLR effectiveness and avoiding >

Re: [PATCH v6 3/4] arm64: mm: support ARCH_MMAP_RND_BITS.

2015-12-14 Thread Will Deacon
Hi Daniel, On Fri, Dec 11, 2015 at 09:52:17AM -0800, Daniel Cashman wrote: > From: dcashman > > arm64: arch_mmap_rnd() uses STACK_RND_MASK to generate the > random offset for the mmap base address. This value represents a > compromise between increased ASLR effectiveness

Re: [PATCH v6 3/4] arm64: mm: support ARCH_MMAP_RND_BITS.

2015-12-14 Thread Daniel Cashman
On 12/14/2015 03:19 AM, Will Deacon wrote: >> +# max bits determined by the following formula: >> +# VA_BITS - PAGE_SHIFT - 3 > > Now that we have this comment, I think we can drop the unsupported > combinations from the list below. That means we just end up with: > >> +config

[PATCH v6 3/4] arm64: mm: support ARCH_MMAP_RND_BITS.

2015-12-11 Thread Daniel Cashman
From: dcashman arm64: arch_mmap_rnd() uses STACK_RND_MASK to generate the random offset for the mmap base address. This value represents a compromise between increased ASLR effectiveness and avoiding address-space fragmentation. Replace it with a Kconfig option, which is sensibly bounded, so

[PATCH v6 3/4] arm64: mm: support ARCH_MMAP_RND_BITS.

2015-12-11 Thread Daniel Cashman
From: dcashman arm64: arch_mmap_rnd() uses STACK_RND_MASK to generate the random offset for the mmap base address. This value represents a compromise between increased ASLR effectiveness and avoiding address-space fragmentation. Replace it with a Kconfig option, which is