【OLK-5.10】热补丁存在推栈漏检查栈的场景

【严重程度】一般
【特性】工具/livepatch
【重现类型】有条件必然重现
【定位分析】

问题记录见

如下图所示，ppc架构从func1长跳转到func2时，需要先跳到一个中间的trampoline（ppc32上叫plt，ppc64上叫stub）。当执行到trampoline时被中断打断，则推栈流程检查不到func1，如果用户对func1打热补丁，则会导致旧函数正在运行而被热补丁修改了。当旧函数的返回地址刚好在指令替换区被热补丁修改了，cpu执行被改过的指令导致跑飞：

Hi ***zhixiuzhou***, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at **[Here](https://gitee.com/openeuler/community/blob/master/en/sig-infrastructure/command.md)**.
If you have any questions, please contact the SIG: [Kernel](https://gitee.com/openeuler/community/tree/master/sig/Kernel), and any of the maintainers: @yangyingliang , @gatieme , @jiaoff , @LiuYongQiang0816 , @wangxiongfeng , @kevinzhu1 , @jentlestea , @lujialin2 , @xukuohai , @lengchao , @alvin-ling , @yuzenghui , @juntianlinux , @chenguangli , @gasonchen , @whoisxxx , @koulihong , @kailiu42 , @hanjun-guo , @woqidaideshi , @chiqijun , @wkfxxx , @thundertown , @guohaocs2c , @kylin-mayukun , @oskernel0719 , @liuxinux , @newbeats , @zhujianwei001 , @zhenpengzheng , @SuperSix173 , @colyli , @zhangyi089 , @htforge , @yuehaibing_planb , @haochengxie , @guzitao , @CTC-XiboWang , @Hongchen_Zhang , @chenwei_kernel , @x56Jason , @gouhao2022 , @duanqiangwen , @georgeguo , @mao-hongbo , @allen-shi , @zhangjialin11 , @stkid , @hellotcc , @hunan4222 , @kongzizaixian , @LiYihang226 , @young1c , @hucz , @wangboe2022 , @chenke1978 , @JerryHZ , @youngersun , @wsoydl , @sanglipeng , @zhang-changzhong , @jimmy_hero , @ygn-ndwd-official , @xiexiuqi , @zhengzengkai

GVP openEuler/kernel

内容风险标识

评论 (1)

GVPopenEuler/kernel

内容风险标识