x86: add CONFIG_X86_STACK_PROTECTION

This enables the MMU-based stack protection feature,
which will cause a fatal error if a thread overflows
its stack in kernel mode, at a nontrivial cost in memory
(4K per thread).

Signed-off-by: Andrew Boie <andrew.p.boie@intel.com>
This commit is contained in:
Andrew Boie 2017-07-14 09:37:43 -07:00 committed by Anas Nashif
commit dff21de082

View file

@ -78,6 +78,16 @@ config X86_MMU
This options enables the memory management unit present in x86. Enabling This options enables the memory management unit present in x86. Enabling
this will create boot time page table structure. this will create boot time page table structure.
config X86_STACK_PROTECTION
bool
default n
depends on X86_MMU
prompt "MMU-based stack overflow protection"
help
This option leverages the MMU to cause a system fatal error if the
bounds of the current process stack are overflowed. This is done
by preceding all stack areas with a 4K guard page.
menu "Floating Point Options" menu "Floating Point Options"
depends on CPU_HAS_FPU depends on CPU_HAS_FPU