Skip to content

20250908-WOLFSSL_TEXT_SEGMENT_CANONICALIZER#9172

Merged
dgarske merged 1 commit intowolfSSL:masterfrom
douzzer:20250908-WOLFSSL_TEXT_SEGMENT_CANONICALIZER
Sep 10, 2025
Merged

20250908-WOLFSSL_TEXT_SEGMENT_CANONICALIZER#9172
dgarske merged 1 commit intowolfSSL:masterfrom
douzzer:20250908-WOLFSSL_TEXT_SEGMENT_CANONICALIZER

Conversation

@douzzer
Copy link
Copy Markdown
Contributor

@douzzer douzzer commented Sep 8, 2025

linuxkm/linuxkm_wc_port.h: when HAVE_LINUXKM_PIE_SUPPORT, map
WOLFSSL_TEXT_SEGMENT_CANONICALIZER() to wc_linuxkm_normalize_relocations(), and
define WOLFSSL_TEXT_SEGMENT_CANONICALIZER_BUFSIZ to 8192.

linuxkm/module_hooks.c: in wc_linuxkm_normalize_relocations(), add checks for
out-of-order offsets.

tested with

FIPS_DEV_BRANCH=local:master wolfssl-multi-test.sh ... --test-uncommitted ...
check-source-text-fips-dev
linuxkm-fips-v5-vanilla-insmod-wolfguard-cust3
linuxkm-fips-v6-insmod-wolfguard-cust3
quantum-safe-wolfssl-all-crypto-only-intelasm-fips-dev-linuxkm-next-insmod
linuxkm-fips-dev-insmod-wolfguard

with the ad-hoc FIPS v5 and v6 patches in wolfssl-multi-test.sh updated with https://github.com/wolfSSL/fips/pull/353.

  WOLFSSL_TEXT_SEGMENT_CANONICALIZER() to wc_linuxkm_normalize_relocations(), and
  define WOLFSSL_TEXT_SEGMENT_CANONICALIZER_BUFSIZ to 8192.

linuxkm/module_hooks.c: in wc_linuxkm_normalize_relocations(), add checks for
  out-of-order offsets.
@douzzer
Copy link
Copy Markdown
Contributor Author

douzzer commented Sep 8, 2025

retest this please

Found unhandled hudson.remoting.RequestAbortedException exception:
java.io.StreamCorruptedException: invalid stream header: 636F7272
	hudson.remoting.Request.abort(Request.java:358)
	hudson.remoting.Channel.terminate(Channel.java:1196)
	hudson.remoting.SynchronousCommandTransport$ReaderThread.run(SynchronousCommandTransport.java:95)

@dgarske dgarske merged commit 71068a4 into wolfSSL:master Sep 10, 2025
397 of 400 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants