From: Daniel Borkmann <dan...@iogearbox.net>
Date: Tue,  1 Jan 2019 21:49:21 +0100

> Restrict stack pointer arithmetic for unpriviledged users in that
> arithmetic itself must not go out of bounds as opposed to the actual
> access later on. Therefore after each adjust_ptr_min_max_vals() with
> a stack pointer as a destination we simulate a check_stack_access()
> of 1 byte on the destination and once that fails the program is
> rejected for unpriviledged program loads. This is analoge to map
                                                    ^^^^^^^

Should be "analog".

Reply via email to