Consider reintroducing checking of alloca() calls in STACKLEAK


ID: 954
PHID: PHID-TASK-ocolbbw5xegkztqyn47v
Author: madaidan
Status at Migration Time: open
Priority at Migration Time: Normal


We might want to add this patch to hardened-kernel once our version catches up with STACKLEAK.

This patch was part of the original STACKLEAK patch series sent upstream but it was dropped because all VLAs were removed from the kernel so it had no purpose anymore.

This would only be useful for out-of-tree code (certain kernel modules/patches) or as a fail-safe incase VLAs are reintroduced although that’s unlikely and even more so for an LTS kernel, meaning this patch has likely very little, if any at all, advantage now.