misc/lkdtm/bugs.c

144 /* This should trip the stack canary, not corrupt the return address. */
154 /* Same as above but will only get a canary with -fstack-protector-strong */
191 	unsigned long *canary = (unsigned long *)stack;
194 	/* Do our best to find the canary in a 16 word window ... */
196 		canary = (unsigned long *)stack + i;
198 		if (*canary == current->stack_canary)
200 		if (*canary == init_task.stack_canary)
207 		 * If the canary doesn't match what's in the task_struct,
208 		 * we're either using a global canary or the stack frame
212 			pr_err("FAIL: global stack canary found at offset %ld (canary for pid %d matches init_task's)!\n",
215 			pr_warn("FAIL: did not correctly locate stack canary :(\n");
224 	canary = (unsigned long *)stack + current_offset;
226 		stack_canary = *canary;
229 		pr_info("Recorded stack canary for pid %d at offset %ld\n",
235 			pr_warn("ERROR: canary offset changed from %ld to %ld!?\n",
240 		if (*canary == stack_canary) {
241 			pr_warn("FAIL: canary identical for pid %d and pid %d at offset %ld!\n",