On 19 May 2023, Alexander Lobakin outgrape: > `file name + function name` is not a unique pair: in one of FG-KASLR > discussions, someone even wrote simple script, which showed around 40 > collisions in the kernel. My approach was to include file path starting > at the kernel root folder, i.e. `net/core/dev.o:register_netdev`. > I'm not sure why no comments happened back then tho. Maybe you could > take a look, I'm pretty busy with other projects, but if you find > anything useful there in the RFC, I could join to a little bit. My kallmodsyms patch does much the same, except to save space we eliminate any leading path elements we can. Keeping those still necessary to reduce redundancy, and eliminating the TU name entirely if not necessary, saves several hundred KiB in my measurements and leads to a total space hit for all of this of only about 12KiB. (Downside: slightly less clear naming in /proc/kallmodsyms.) -- NULL && (void)
