Re: [OpenWrt-Devel] MIPS stack security and other problems

2019-01-22 Thread Rosen Penev
On Tue, Jan 22, 2019 at 2:34 PM Hauke Mehrtens wrote: > > On 1/19/19 2:56 PM, Dave Taht wrote: > > Hauke Mehrtens writes: > > > >> On 12/18/18 12:46 PM, Hauke Mehrtens wrote: > >>> On 12/17/18 1:54 AM, Dave Taht wrote: > > A pretty deep look at home MIPS and arm routers, and a

Re: [OpenWrt-Devel] MIPS stack security and other problems

2019-01-22 Thread Hauke Mehrtens
On 1/19/19 2:56 PM, Dave Taht wrote: > Hauke Mehrtens writes: > >> On 12/18/18 12:46 PM, Hauke Mehrtens wrote: >>> On 12/17/18 1:54 AM, Dave Taht wrote: A pretty deep look at home MIPS and arm routers, and a surprising bug in Linux/MIPS - by mudge and co:

Re: [OpenWrt-Devel] MIPS stack security and other problems

2019-01-19 Thread Dave Taht
Hauke Mehrtens writes: > On 12/18/18 12:46 PM, Hauke Mehrtens wrote: >> On 12/17/18 1:54 AM, Dave Taht wrote: >>> >>> A pretty deep look at home MIPS and arm routers, and a surprising bug in >>> Linux/MIPS - by mudge and co: >>> >>>

Re: [OpenWrt-Devel] MIPS stack security and other problems

2019-01-01 Thread Rosen Penev
On Tue, Jan 1, 2019 at 9:44 AM Hauke Mehrtens wrote: > > On 12/18/18 12:46 PM, Hauke Mehrtens wrote: > > On 12/17/18 1:54 AM, Dave Taht wrote: > >> > >> A pretty deep look at home MIPS and arm routers, and a surprising bug in > >> Linux/MIPS - by mudge and co: > >> > >>

Re: [OpenWrt-Devel] MIPS stack security and other problems

2019-01-01 Thread Hauke Mehrtens
On 12/18/18 12:46 PM, Hauke Mehrtens wrote: On 12/17/18 1:54 AM, Dave Taht wrote: A pretty deep look at home MIPS and arm routers, and a surprising bug in Linux/MIPS - by mudge and co: https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html I have no idea if current

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-19 Thread Petr Štetiar
Dave Taht [2018-12-19 04:35:26]: > Still... "Friends don't let friends run factory firmware". Sure, that's why there is table of hardware in the wiki and few forum topics where you can find hardware suitable for your needs and your budget. Or did I missed something? -- ynezz

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-19 Thread Dave Taht
Still... "Friends don't let friends run factory firmware". ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-19 Thread Petr Štetiar
Dave Taht [2018-12-18 07:05:41]: Hi, > How many of the 28 can be reflashed with modern openwrt? I just did a quick `git grep`: rt-ac55u|ac55u|ac55 - no match dir-850l|850 - no match dir-880l|880 - no match e2500|2500 - brcm47xx/linksys-e2500 ea6100|6100 - no match ea6900|6900 - no match

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-18 Thread Dave Taht
Going back to my ancient cerowrt box, the stack space is actively being relocated on this version, but marked executable... 7f8d4000-7f8f5000 rwxp 00:00 0 [stack] 7fff7000-7fff8000 r-xp 00:00 0 [vdso] but there doesn't appear to be a vfp area on this ancient

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-18 Thread Dave Taht
Cutting this down a bit >> Do the common MIPS CPUs support non executable stacks at all? ? >> cpu_has_rixi is set to 0 for the ath79 SoCs for example, for lantiq some Should this show up in /proc/cpuinfo? Or where? >> automatic detection is done, but I haven't checked the result. > ramips

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-18 Thread Rosen Penev
On Tue, Dec 18, 2018 at 6:41 AM Hauke Mehrtens wrote: > > On 12/18/18 11:02 AM, Andre Heider wrote: > > On 18/12/2018 01:44, Rosen Penev wrote: > >> On Mon, Dec 17, 2018 at 4:34 PM Rosen Penev wrote: > >>> > >>> On Mon, Dec 17, 2018 at 3:40 PM Dave Taht wrote: > > John Crispin

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-18 Thread Dave Taht
Hauke Mehrtens writes: > On 12/17/18 1:54 AM, Dave Taht wrote: >> >> A pretty deep look at home MIPS and arm routers, and a surprising bug in >> Linux/MIPS - by mudge and co: >> >> https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html >> >> I have no idea if current

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-18 Thread Hauke Mehrtens
On 12/18/18 11:02 AM, Andre Heider wrote: > On 18/12/2018 01:44, Rosen Penev wrote: >> On Mon, Dec 17, 2018 at 4:34 PM Rosen Penev wrote: >>> >>> On Mon, Dec 17, 2018 at 3:40 PM Dave Taht wrote: John Crispin writes: > On 17/12/2018 23:18, Dave Taht wrote: >> Rosen Penev

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-18 Thread Hauke Mehrtens
On 12/17/18 1:54 AM, Dave Taht wrote: > > A pretty deep look at home MIPS and arm routers, and a surprising bug in > Linux/MIPS - by mudge and co: > > https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html > > I have no idea if current openwrt, or what prior releases...

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-18 Thread Andre Heider
On 18/12/2018 01:44, Rosen Penev wrote: On Mon, Dec 17, 2018 at 4:34 PM Rosen Penev wrote: On Mon, Dec 17, 2018 at 3:40 PM Dave Taht wrote: John Crispin writes: On 17/12/2018 23:18, Dave Taht wrote: Rosen Penev writes: On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: A pretty

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-17 Thread Rosen Penev
On Mon, Dec 17, 2018 at 4:34 PM Rosen Penev wrote: > > On Mon, Dec 17, 2018 at 3:40 PM Dave Taht wrote: > > > > John Crispin writes: > > > > > On 17/12/2018 23:18, Dave Taht wrote: > > >> Rosen Penev writes: > > >> > > >>> On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: > > > > A

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-17 Thread Rosen Penev
On Mon, Dec 17, 2018 at 3:40 PM Dave Taht wrote: > > John Crispin writes: > > > On 17/12/2018 23:18, Dave Taht wrote: > >> Rosen Penev writes: > >> > >>> On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: > > A pretty deep look at home MIPS and arm routers, and a surprising > bug

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-17 Thread Rosen Penev
On Mon, Dec 17, 2018 at 2:49 PM John Crispin wrote: > > > On 17/12/2018 23:18, Dave Taht wrote: > > Rosen Penev writes: > > > >> On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: > >>> > >>> A pretty deep look at home MIPS and arm routers, and a surprising > >>> bug in Linux/MIPS - by mudge and

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-17 Thread Dave Taht
John Crispin writes: > On 17/12/2018 23:18, Dave Taht wrote: >> Rosen Penev writes: >> >>> On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: A pretty deep look at home MIPS and arm routers, and a surprising bug in Linux/MIPS - by mudge and co:

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-17 Thread John Crispin
On 17/12/2018 23:18, Dave Taht wrote: Rosen Penev writes: On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: A pretty deep look at home MIPS and arm routers, and a surprising bug in Linux/MIPS - by mudge and co: https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html I

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-17 Thread Dave Taht
Rosen Penev writes: > On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: >> >> >> A pretty deep look at home MIPS and arm routers, and a surprising >> bug in Linux/MIPS - by mudge and co: >> >> https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html >> >> I have no idea if

Re: [OpenWrt-Devel] MIPS stack security and other problems

2018-12-16 Thread Rosen Penev
On Sun, Dec 16, 2018 at 4:54 PM Dave Taht wrote: > > > A pretty deep look at home MIPS and arm routers, and a surprising bug in > Linux/MIPS - by mudge and co: > > https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html > > I have no idea if current openwrt, or what prior

[OpenWrt-Devel] MIPS stack security and other problems

2018-12-16 Thread Dave Taht
A pretty deep look at home MIPS and arm routers, and a surprising bug in Linux/MIPS - by mudge and co: https://cyber-itl.org/2018/12/07/a-look-at-home-routers-and-linux-mips.html I have no idea if current openwrt, or what prior releases... are subject to the problems they outline.