On Fri, 4 Feb 2022 00:59:59 +0100 Jann Horn jannh@google.com wrote:
I looked in the history and the code was filtering for ELF headers there already. I am just thinking this feels like a good idea regardless of the file format to help verify the file on-disk is the file we think was mapped.
Yeah, I guess that's reasonable. The main difference will probably be that the starting pages of some font files, locale files and python libraries will also be logged.
Are you planning to turn that into a proper patch and take it through your tree, or something like that? If so, we should tell akpm to take this one back out...
I have coredump-also-dump-first-pages-of-non-executable-elf-libraries.patch on hold, pending outcome of this discussion.