From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: by sourceware.org (Postfix, from userid 1944) id 6054D3851503; Thu, 27 Oct 2022 13:57:10 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 6054D3851503 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sourceware.org; s=default; t=1666879030; bh=jcdsf3SP+zOxr59rc/5deFoRTSncnaoXJz9GuDhi3xk=; h=From:To:Subject:Date:From; b=EZu/uDUTeSKrAPZQmUYfI+YFY+JxnuVMBunTOJSR3hqSB/D+iZ8CrX5FsPwg0EGNv ++4nyWLpv3z0SfSNpqlcy6dc8+OGYFID3FEvllaLk2KcFZH+nrsuJmiTJF3l21WAxA Rd30A5To0tu7WX2zaxm2gXBkZMBcSrhT+upmndwY= Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Szabolcs Nagy To: glibc-cvs@sourceware.org Subject: [glibc/arm/morello/main] cheri: malloc: Ensure the mappings have RW permission X-Act-Checkin: glibc X-Git-Author: Szabolcs Nagy X-Git-Refname: refs/heads/arm/morello/main X-Git-Oldrev: dc8f9560104f0803e53fa23bfd011aa9878d5a97 X-Git-Newrev: af11ceae3867a3786308738a6870a8f1016a865e Message-Id: <20221027135710.6054D3851503@sourceware.org> Date: Thu, 27 Oct 2022 13:57:10 +0000 (GMT) List-Id: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=af11ceae3867a3786308738a6870a8f1016a865e commit af11ceae3867a3786308738a6870a8f1016a865e Author: Szabolcs Nagy Date: Fri Oct 21 12:35:33 2022 +0100 cheri: malloc: Ensure the mappings have RW permission The arena allocator incrementally applies RW mprotect to a PROT_NONE mapping. Use PROT_MAX to ensure the pointers derived from the original mapping have RW capability permission. Diff: --- malloc/malloc.c | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/malloc/malloc.c b/malloc/malloc.c index 02df29d2ad..701adbebca 100644 --- a/malloc/malloc.c +++ b/malloc/malloc.c @@ -1134,8 +1134,16 @@ static mchunkptr mremap_chunk(mchunkptr p, size_t new_size); # define MAP_NORESERVE 0 #endif +/* Allow RW mprotect later, on CHERI this means RW capability permission. */ +#ifdef PROT_MAX +# define PROT_MAX_RW PROT_MAX (PROT_READ | PROT_WRITE) +#else +# define PROT_MAX_RW 0 +#endif + #define MMAP(addr, size, prot, flags) \ - __mmap((addr), (size), (prot), (flags)|MAP_ANONYMOUS|MAP_PRIVATE, -1, 0) + __mmap((addr), (size), (prot)|PROT_MAX_RW, \ + (flags)|MAP_ANONYMOUS|MAP_PRIVATE, -1, 0) /*