939df36e55
and make the stack and heap non-executable by default. the changes fall into two basic catagories: - pmap and trap-handler changes. these are all MD: = alpha: we already track per-page execute permission with the (software) PG_EXEC bit, so just have the trap handler pay attention to it. = i386: use a new GDT segment for %cs for processes that have no executable mappings above a certain threshold (currently the bottom of the stack). track per-page execute permission with the last unused PTE bit. = powerpc/ibm4xx: just use the hardware exec bit. = powerpc/oea: we already track per-page exec bits, but the hardware only implements non-exec mappings at the segment level. so track the number of executable mappings in each segment and turn on the no-exec segment bit iff the count is 0. adjust the trap handler to deal. = sparc (sun4m): fix our use of the hardware protection bits. fix the trap handler to recognize text faults. = sparc64: split the existing unified TSB into data and instruction TSBs, and only load TTEs into the appropriate TSB(s) for the permissions. fix the trap handler to check for execute permission. = not yet implemented: amd64, hppa, sh5 - changes in all the emulations that put a signal trampoline on the stack. instead, we now put the trampoline into a uvm_aobj and map that into the process separately. originally from openbsd, adapted for netbsd by me. |
||
|---|---|---|
| .. | ||
| files.hpux | ||
| hpux_compat.c | ||
| hpux_errno.c | ||
| hpux_exec_aout.c | ||
| hpux_exec.c | ||
| hpux_exec.h | ||
| hpux_file.c | ||
| hpux_ipc.c | ||
| hpux_ipc.h | ||
| hpux_net.c | ||
| hpux_sig.c | ||
| hpux_sig.h | ||
| hpux_signo.c | ||
| hpux_syscall.h | ||
| hpux_syscallargs.h | ||
| hpux_syscalls.c | ||
| hpux_sysent.c | ||
| hpux_termio.h | ||
| hpux_tty.c | ||
| hpux_types.h | ||
| hpux_util.h | ||
| hpux.h | ||
| Makefile | ||
| syscalls.conf | ||
| syscalls.master | ||