a5904b1
diff -uNrp kernel-3.2.fc16.orig/arch/x86/mm/mmap.c kernel-3.2.fc16.new/arch/x86/mm/mmap.c
a5904b1
--- kernel-3.2.fc16.orig/arch/x86/mm/mmap.c	2012-03-19 16:47:03.495169091 -0400
a5904b1
+++ kernel-3.2.fc16.new/arch/x86/mm/mmap.c	2012-03-19 16:50:03.574168052 -0400
a5904b1
@@ -106,6 +106,10 @@ static unsigned long mmap_legacy_base(vo
a5904b1
                return TASK_UNMAPPED_BASE + mmap_rnd();
a5904b1
 }
a5904b1
a5904b1
+#ifdef CONFIG_X86_32
a5904b1
+  #define SHLIB_BASE             0x00111000
a5904b1
+#endif
a5904b1
+
a5904b1
 /*
a5904b1
  * This function, called very early during the creation of a new
a5904b1
  * process VM image, sets up which VM layout function to use:
a5904b1
@@ -126,8 +126,10 @@ void arch_pick_mmap_layout(struct mm_str
a5904b1
 #ifdef CONFIG_X86_32
a5904b1
 		if (!(current->personality & READ_IMPLIES_EXEC)
a5904b1
 		    && !(__supported_pte_mask & _PAGE_NX)
a5904b1
-		    && mmap_is_ia32())
a5904b1
+		    && mmap_is_ia32()) {
a5904b1
+			mm->shlib_base = SHLIB_BASE + mmap_rnd();
a5904b1
 			mm->get_unmapped_exec_area = arch_get_unmapped_exec_area;
a5904b1
+		}
a5904b1
 #endif
a5904b1
 		mm->unmap_area = arch_unmap_area_topdown;
a5904b1
 	}
a5904b1
diff -uNrp kernel-3.2.fc16.orig/include/linux/mm_types.h kernel-3.2.fc16.new/include/linux/mm_types.h
a5904b1
--- kernel-3.2.fc16.orig/include/linux/mm_types.h	2012-03-19 16:46:47.382169153 -0400
a5904b1
+++ kernel-3.2.fc16.new/include/linux/mm_types.h	2012-03-19 16:50:40.738168219 -0400
a5904b1
@@ -300,6 +300,7 @@ struct mm_struct {
a5904b1
 	void (*unmap_area) (struct mm_struct *mm, unsigned long addr);
a5904b1
 #endif
a5904b1
 	unsigned long mmap_base;		/* base of mmap area */
a5904b1
+	unsigned long shlib_base;		/* base of lib map area (ASCII armour)*/
a5904b1
 	unsigned long task_size;		/* size of task vm space */
a5904b1
 	unsigned long cached_hole_size; 	/* if non-zero, the largest hole below free_area_cache */
a5904b1
 	unsigned long free_area_cache;		/* first hole of size cached_hole_size or larger */
a5904b1
diff -uNrp kernel-3.2.fc16.orig/mm/mmap.c kernel-3.2.fc16.new/mm/mmap.c
a5904b1
--- kernel-3.2.fc16.orig/mm/mmap.c	2012-03-19 16:46:15.791169274 -0400
a5904b1
+++ kernel-3.2.fc16.new/mm/mmap.c	2012-03-19 16:51:37.351166875 -0400
a5904b1
@@ -1594,8 +1594,6 @@ static bool should_randomize(void)
a5904b1
 		!(current->personality & ADDR_NO_RANDOMIZE);
a5904b1
 }
a5904b1
 
a5904b1
-#define SHLIB_BASE	0x00110000
a5904b1
-
a5904b1
 unsigned long
a5904b1
 arch_get_unmapped_exec_area(struct file *filp, unsigned long addr0,
a5904b1
 		unsigned long len0, unsigned long pgoff, unsigned long flags)
a5904b1
@@ -1612,8 +1610,8 @@ arch_get_unmapped_exec_area(struct file
a5904b1
 		return addr;
a5904b1
 
a5904b1
 	if (!addr)
a5904b1
-		addr = !should_randomize() ? SHLIB_BASE :
a5904b1
-			randomize_range(SHLIB_BASE, 0x01000000, len);
a5904b1
+		addr = !should_randomize() ? mm->shlib_base :
a5904b1
+			randomize_range(mm->shlib_base, 0x01000000, len);
a5904b1
 
a5904b1
 	if (addr) {
a5904b1
 		addr = PAGE_ALIGN(addr);
a5904b1
@@ -1623,7 +1621,7 @@ arch_get_unmapped_exec_area(struct file
a5904b1
 			return addr;
a5904b1
 	}
a5904b1
 
a5904b1
-	addr = SHLIB_BASE;
a5904b1
+	addr = mm->shlib_base;
a5904b1
 	for (vma = find_vma(mm, addr); ; vma = vma->vm_next) {
a5904b1
 		/* At this point:  (!vma || addr < vma->vm_end). */
a5904b1
 		if (TASK_SIZE - len < addr)