The Linux Foundation has announced that Google will fund the maintenance of security mechanisms in the Linux kernel and enhance kernel security. Gustavo Silva and Nathan Chancellor will be employed full-time for this purpose.
Nathan is known for his work on ensuring the Linux kernel builds using the Clang compiler and implementing protection mechanisms at compile-time, such as Control Flow Integrity (CFI). His further work will focus on fixing all errors that arise when using Clang/LLVM and implementing a continuous integration system to test Clang-based builds. Once known issues are addressed, he will begin adding additional security strengthening features provided by the Clang compiler to the kernel.
Gustavo is an active participant in the Kernel Self Protection Project (KSPP), which promotes the adoption of active protection technologies in the Linux kernel. Gustavo's main task will be to eliminate some classes of buffer overflows by replacing all instances of zero-length arrays or arrays with a single element with flexible array member declarations. Additionally, Gustavo will work on fixing code errors before they make it into the main kernel, as well as advancing active protection mechanisms in the kernel.
Source: opennet.ru
