search

llsoftsec / llsoftsecbook

Low-Level Software Security for Compiler Developers
https://llsoftsec.github.io/llsoftsecbook/
Other
527 stars 50 forks source link

Consider section on ABI vulnerabilities #88

Open sam-ellis opened 2 years ago

sam-ellis commented 2 years ago

Consider section on ABI vulnerabilities. The premise is that some computing systems provide a security enclave, for example, Arm TrustZone and Intel SGX. When such an enclave exists there is usually a way to call from outside to inside or vice versa, and this requires care at ABI level to ensure that outside cannot unduly influence inside and cannot reveal private state of inside. There have been cases where the security has not been sufficiently enforced, for example:

If the topic is accepted, we shall need to decide where it best fits. At the moment, in the Other Security Topics section is a reasonable place. Other suggestions welcome.

g-kouv commented 2 years ago

This sounds like a very important topic and we should absolutely include it.

I agree that Other Security Topics seems like the best place at the moment, but this seems to have strong connections to the Memory Vulnerabilities chapter too.