Robert Watson 9612674f64 In libcasper, prefer to send a function index or service name over the IPC
channel to a zygote process, rather than sending a function pointer or
service pointer.  This avoids transfering pointers between address spaces,
which while robust in this case (due to the zygote being forked() from the
parent) is not generally a good idea, especially in the presence of
increasingly popular control-flow integrity and pointer protection
mitigation schemes.  With this change, ping(8) and other sandboxed tools
using libcasper for DNS resolution now work on architectures with tagged
memory again.

Reviewed by:	oshogbo
MFC after:	1 week
Sponsored by:	DARPA, AFRL
2017-03-23 14:35:21 +00:00
..
2017-03-20 13:02:27 +00:00
2017-03-22 20:51:52 +00:00
2017-02-28 23:42:47 +00:00
MFH
2016-04-04 23:55:32 +00:00
MFH
2016-03-02 16:14:46 +00:00
2017-01-30 23:00:51 +00:00
MFH
2016-03-02 16:14:46 +00:00
2016-11-11 23:28:07 +00:00
2017-02-28 23:42:47 +00:00
2016-11-20 06:10:12 +00:00
2017-03-11 00:08:11 +00:00
MFH
2016-03-02 16:14:46 +00:00
2017-02-27 00:10:00 +00:00
2017-03-19 00:51:12 +00:00
MFH
2016-04-13 16:19:50 +00:00
2017-02-14 13:35:59 +00:00
2017-02-28 23:42:47 +00:00
2017-01-04 16:09:08 +00:00
2017-02-28 23:42:47 +00:00
2017-01-28 23:51:03 +00:00