WebSVN – Kolibri OS – Diff – /drivers/include/linux/poison.h


#ifndef _LINUX_POISON_H
#define _LINUX_POISON_H
 
/********** include/linux/list.h **********/
 
/*
 * Architectures might want to move the poison pointer offset
 * into some well-recognized area such as 0xdead000000000000,
 * that is also not mappable by user-space exploits:
 */
#ifdef CONFIG_ILLEGAL_POINTER_VALUE
# define POISON_POINTER_DELTA _AC(CONFIG_ILLEGAL_POINTER_VALUE, UL)
#else
# define POISON_POINTER_DELTA 0
#endif
 
/*
 * These are non-NULL pointers that will result in page faults
 * under normal circumstances, used to verify that nobody uses
 * non-initialized list entries.
 */
#define LIST_POISON1  ((void *) 0x00100100 + POISON_POINTER_DELTA)
#define LIST_POISON2  ((void *) 0x00200200 + POISON_POINTER_DELTA)
 
/********** include/linux/timer.h **********/
/*
 * Magic number "tsta" to indicate a static timer initializer
 * for the object debugging code.
 */
#define TIMER_ENTRY_STATIC	((void *) 0x74737461)
 
/********** mm/debug-pagealloc.c **********/
#define PAGE_POISON 0xaa
 
/********** mm/slab.c **********/
/*
 * Magic nums for obj red zoning.
 * Placed in the first word before and the first word after an obj.
 */
#define	RED_INACTIVE	0x09F911029D74E35BULL	/* when obj is inactive */
#define	RED_ACTIVE	0xD84156C5635688C0ULL	/* when obj is active */
 
 
 
 
 
 
 
#define SLUB_RED_INACTIVE	0xbb
#define SLUB_RED_ACTIVE		0xcc
 
/* ...and for poisoning */
#define	POISON_INUSE	0x5a	/* for use-uninitialised poisoning */
#define POISON_FREE	0x6b	/* for use-after-free poisoning */
#define	POISON_END	0xa5	/* end-byte of poisoning */
 
/********** arch/$ARCH/mm/init.c **********/
#define POISON_FREE_INITMEM	0xcc
 
/********** arch/ia64/hp/common/sba_iommu.c **********/
/*
 * arch/ia64/hp/common/sba_iommu.c uses a 16-byte poison string with a
 * value of "SBAIOMMU POISON\0" for spill-over poisoning.
 */
 
/********** fs/jbd/journal.c **********/
#define JBD_POISON_FREE		0x5b
#define JBD2_POISON_FREE	0x5c
 
/********** drivers/base/dmapool.c **********/
#define	POOL_POISON_FREED	0xa7	/* !inuse */
#define	POOL_POISON_ALLOCATED	0xa9	/* !initted */
 
/********** drivers/atm/ **********/
#define ATM_POISON_FREE		0x12
#define ATM_POISON		0xdeadbeef
 
/********** net/ **********/
#define NEIGHBOR_DEAD		0xdeadbeef
#define NETFILTER_LINK_POISON	0xdead57ac
 
/********** kernel/mutexes **********/
#define MUTEX_DEBUG_INIT	0x11
#define MUTEX_DEBUG_FREE	0x22
 
/********** lib/flex_array.c **********/
#define FLEX_ARRAY_FREE	0x6c	/* for use-after-free poisoning */
 
/********** security/ **********/
#define KEY_DESTROY		0xbd
 
/********** sound/oss/ **********/
#define OSS_POISON_FREE		0xAB
 
#endif

Subversion Repositories Kolibri OS

(root)/drivers/include/linux/poison.h @ 2967 – Rev 2967 → 3031

Rev 2967		Rev 3031
1	#ifndef _LINUX_POISON_H	1	#ifndef _LINUX_POISON_H
2	#define _LINUX_POISON_H	2	#define _LINUX_POISON_H
3		3
4	/******** include/linux/list.h ********/	4	/******** include/linux/list.h ********/
5		5
6	/*	6	/*
7	* Architectures might want to move the poison pointer offset	7	* Architectures might want to move the poison pointer offset
8	* into some well-recognized area such as 0xdead000000000000,	8	* into some well-recognized area such as 0xdead000000000000,
9	* that is also not mappable by user-space exploits:	9	* that is also not mappable by user-space exploits:
10	*/	10	*/
11	#ifdef CONFIG_ILLEGAL_POINTER_VALUE	11	#ifdef CONFIG_ILLEGAL_POINTER_VALUE
12	# define POISON_POINTER_DELTA _AC(CONFIG_ILLEGAL_POINTER_VALUE, UL)	12	# define POISON_POINTER_DELTA _AC(CONFIG_ILLEGAL_POINTER_VALUE, UL)
13	#else	13	#else
14	# define POISON_POINTER_DELTA 0	14	# define POISON_POINTER_DELTA 0
15	#endif	15	#endif
16		16
17	/*	17	/*
18	* These are non-NULL pointers that will result in page faults	18	* These are non-NULL pointers that will result in page faults
19	* under normal circumstances, used to verify that nobody uses	19	* under normal circumstances, used to verify that nobody uses
20	* non-initialized list entries.	20	* non-initialized list entries.
21	*/	21	*/
22	#define LIST_POISON1 ((void *) 0x00100100 + POISON_POINTER_DELTA)	22	#define LIST_POISON1 ((void *) 0x00100100 + POISON_POINTER_DELTA)
23	#define LIST_POISON2 ((void *) 0x00200200 + POISON_POINTER_DELTA)	23	#define LIST_POISON2 ((void *) 0x00200200 + POISON_POINTER_DELTA)
24		24
25	/******** include/linux/timer.h ********/	25	/******** include/linux/timer.h ********/
26	/*	26	/*
27	* Magic number "tsta" to indicate a static timer initializer	27	* Magic number "tsta" to indicate a static timer initializer
28	* for the object debugging code.	28	* for the object debugging code.
29	*/	29	*/
30	#define TIMER_ENTRY_STATIC ((void *) 0x74737461)	30	#define TIMER_ENTRY_STATIC ((void *) 0x74737461)
31		31
32	/******** mm/debug-pagealloc.c ********/	32	/******** mm/debug-pagealloc.c ********/
33	#define PAGE_POISON 0xaa	33	#define PAGE_POISON 0xaa
34		34
35	/******** mm/slab.c ********/	35	/******** mm/slab.c ********/
36	/*	36	/*
37	* Magic nums for obj red zoning.	37	* Magic nums for obj red zoning.
38	* Placed in the first word before and the first word after an obj.	38	* Placed in the first word before and the first word after an obj.
39	*/	39	*/
40	#define RED_INACTIVE 0x09F911029D74E35BULL /* when obj is inactive */	40	#define RED_INACTIVE 0x09F911029D74E35BULL /* when obj is inactive */
41	#define RED_ACTIVE 0xD84156C5635688C0ULL /* when obj is active */	41	#define RED_ACTIVE 0xD84156C5635688C0ULL /* when obj is active */
42		-
43	#ifdef CONFIG_PHYS_ADDR_T_64BIT	-
44	#define MEMBLOCK_INACTIVE 0x3a84fb0144c9e71bULL	-
45	#else	-
46	#define MEMBLOCK_INACTIVE 0x44c9e71bUL	-
47	#endif	-
48		42
49	#define SLUB_RED_INACTIVE 0xbb	43	#define SLUB_RED_INACTIVE 0xbb
50	#define SLUB_RED_ACTIVE 0xcc	44	#define SLUB_RED_ACTIVE 0xcc
51		45
52	/* ...and for poisoning */	46	/* ...and for poisoning */
53	#define POISON_INUSE 0x5a /* for use-uninitialised poisoning */	47	#define POISON_INUSE 0x5a /* for use-uninitialised poisoning */
54	#define POISON_FREE 0x6b /* for use-after-free poisoning */	48	#define POISON_FREE 0x6b /* for use-after-free poisoning */
55	#define POISON_END 0xa5 /* end-byte of poisoning */	49	#define POISON_END 0xa5 /* end-byte of poisoning */
56		50
57	/******** arch/$ARCH/mm/init.c ********/	51	/******** arch/$ARCH/mm/init.c ********/
58	#define POISON_FREE_INITMEM 0xcc	52	#define POISON_FREE_INITMEM 0xcc
59		53
60	/******** arch/ia64/hp/common/sba_iommu.c ********/	54	/******** arch/ia64/hp/common/sba_iommu.c ********/
61	/*	55	/*
62	* arch/ia64/hp/common/sba_iommu.c uses a 16-byte poison string with a	56	* arch/ia64/hp/common/sba_iommu.c uses a 16-byte poison string with a
63	* value of "SBAIOMMU POISON\0" for spill-over poisoning.	57	* value of "SBAIOMMU POISON\0" for spill-over poisoning.
64	*/	58	*/
65		59
66	/******** fs/jbd/journal.c ********/	60	/******** fs/jbd/journal.c ********/
67	#define JBD_POISON_FREE 0x5b	61	#define JBD_POISON_FREE 0x5b
68	#define JBD2_POISON_FREE 0x5c	62	#define JBD2_POISON_FREE 0x5c
69		63
70	/******** drivers/base/dmapool.c ********/	64	/******** drivers/base/dmapool.c ********/
71	#define POOL_POISON_FREED 0xa7 /* !inuse */	65	#define POOL_POISON_FREED 0xa7 /* !inuse */
72	#define POOL_POISON_ALLOCATED 0xa9 /* !initted */	66	#define POOL_POISON_ALLOCATED 0xa9 /* !initted */
73		67
74	/******** drivers/atm/ ********/	68	/******** drivers/atm/ ********/
75	#define ATM_POISON_FREE 0x12	69	#define ATM_POISON_FREE 0x12
76	#define ATM_POISON 0xdeadbeef	70	#define ATM_POISON 0xdeadbeef
77		71
78	/******** net/ ********/	72	/******** net/ ********/
79	#define NEIGHBOR_DEAD 0xdeadbeef	73	#define NEIGHBOR_DEAD 0xdeadbeef
80	#define NETFILTER_LINK_POISON 0xdead57ac	74	#define NETFILTER_LINK_POISON 0xdead57ac
81		75
82	/******** kernel/mutexes ********/	76	/******** kernel/mutexes ********/
83	#define MUTEX_DEBUG_INIT 0x11	77	#define MUTEX_DEBUG_INIT 0x11
84	#define MUTEX_DEBUG_FREE 0x22	78	#define MUTEX_DEBUG_FREE 0x22
85		79
86	/******** lib/flex_array.c ********/	80	/******** lib/flex_array.c ********/
87	#define FLEX_ARRAY_FREE 0x6c /* for use-after-free poisoning */	81	#define FLEX_ARRAY_FREE 0x6c /* for use-after-free poisoning */
88		82
89	/******** security/ ********/	83	/******** security/ ********/
90	#define KEY_DESTROY 0xbd	84	#define KEY_DESTROY 0xbd
91		85
92	/******** sound/oss/ ********/	86	/******** sound/oss/ ********/
93	#define OSS_POISON_FREE 0xAB	87	#define OSS_POISON_FREE 0xAB
94		88
95	#endif	89	#endif