Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CompaSeC project #6

Draft
wants to merge 24 commits into
base: dev
Choose a base branch
from
Draft

CompaSeC project #6

wants to merge 24 commits into from

Conversation

JoGei
Copy link
Member

@JoGei JoGei commented Jan 18, 2023 •
edited
Loading

Features:

  • add RACFED runtime signature scheme (instruction level RASM)
  • selective hardening with automated domain crossing (DMR->nonDMR->DMR)
  • make duplicated branches basic block entities to enable consecutive passes

ToDo

  • resolve conflicts
  • clean-up
  • introduce CompaSeC as CLI argument
  • update documentation

JoGei added 24 commits March 7, 2022 14:23
@JoGei
add usncrambled nemesec: nemesis without fallthrough protected branch…
efb9dd0 
…es method
@JoGei
git patch for to extend llvm CLI for NZDC+ (nemesec branch protection)
808211f
@JoGei
newlib SYS_exit by ecall error detection scheme
1e83425
@JoGei
implicit cast from llvm::StringRef to std::string does not work for a…
19f3a86 
…ll gcc versions
@JoGei
add "-1:=harden all" function name as argument for selective DMR
3f1091c
@JoGei
make frame-size deduction from stack pointer instruction more explici…
ba864ff 
…t. Add tailed indirect call. exclude inlined fence.i instructions from protected stores
@JoGei
add current "nemesec" patch
dde2016
@JoGei
add selective hardening to allow calling DMR'ed functions from non-DM…
5349a27 
…R'ed context
@JoGei
do not duplicate stores for NZDC if store references a volatile
0d4e8fd
@JoGei
add non-DMR -> DMR calling convention
d9d0522
@JoGei
better filtering for D update in CFCSS pass around the call
999ba17
@JoGei
enable shadow stack register for DMR->non-DMR stack spilling
4352a0c
@JoGei
fix failing regression tests after new filter for D updates in CFCSS …
8cb1d68 
…pass
@JoGei
only insert errorBBs for functions being protected or those calling p…
8815647 
…rotected ones
@JoGei
fix: calling convention stays the same for pure signature, too
f20eb0a
@JoGei
treat explcicitly as DMR functions defined known lib calls as user calls
f7bce79
@JoGei
nzdc volatile store protection with swift technique
248cfb1
@JoGei
bugfix: use shadow as source for store-loadback technique iff source …
672217d 
…is the zero register
@JoGei
add RACFED instruction level signature monitoring technique
4458592
@JoGei
make nemesis fallthrough duplicated basic blocks
fb138f1
@JoGei
restructure common flow for RASM<->RACFED
f952efa
@JoGei
remove RACFED rts register from on-libcall must-preserve register list
0c6f65e
@JoGei
manually generate true basic block flow for far-away branches
47aad8a
@JoGei
define for minimum block size for intra block protection
786550f
@JoGei JoGei changed the base branch from main to dev January 18, 2023 02:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@JoGei