[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] Livepatching and Xen Security



On 19/05/17 15:32, Wei Liu wrote:
> On Thu, May 18, 2017 at 08:07:00PM +0100, Andrew Cooper wrote:
>> I would ask however how confident we are that there are no ELF parsing
>> bugs in the code?  I think it might be very prudent to try and build a
>> userspace harness for it and let ALF have a go.
>>
> There is already a fuzzing harness in tools/fuzz for libelf.  Feel free
> to use it with either AFL or LLVM fuzzer. :-)
>
> If it doesn't work, report it and I will fix it.

livepatching doesn't use libelf.

It is a new ELF parsing implementation.

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.