Linux Kernel Self-Protection Project: Addressing Security Challenges with Flexible Array Members and struct sockaddr

One of the many objectives of the Linux Kernel Self-Protection Project (KSPP), which just completed ten years of work, is to ensure that all array references can be bounds-checked, even in the case of flexible array members, the size of which is not known at compile time.

One of the most challenging flexible array members i

The primary benefit from subscribing to LWN is helping to keep us publishing, but, beyond that, subscribers get immediate access to all site content and access to a number of extra site features.