linux-kernel - Re: [PATCH] kasan: turn on -fsanitize-address-use-after-scope

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 8 Dec 2016 15:34:30 +0100
From:   Dmitry Vyukov <dvyukov@...gle.com>
To:     Andrey Ryabinin <aryabinin@...tuozzo.com>
Cc:     Andrew Morton <akpm@...ux-foundation.org>,
        Alexander Potapenko <glider@...gle.com>,
        andreyknvl <andreyknvl@...gle.com>,
        kasan-dev <kasan-dev@...glegroups.com>,
        LKML <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH] kasan: turn on -fsanitize-address-use-after-scope

On Thu, Dec 8, 2016 at 1:48 PM, Andrey Ryabinin <aryabinin@...tuozzo.com> wrote:
> In the upcoming gcc7 release release, the -fsanitize=kernel-address option
> at first implied new -fsanitize-address-use-after-scope option.
> This would cause link errors on older kernels because they don't have
> two new functions required for use-after-scope support. Therefore,
> gcc7 changed default to -fno-sanitize-address-use-after-scope.
>
> Now the kernel has everything required for that feature since
> commit 828347f8f9a5 ("kasan: support use-after-scope detection").
> So, to make it work, we just have to enable use-after-scope in CFLAGS.
>
> Signed-off-by: Andrey Ryabinin <aryabinin@...tuozzo.com>
> ---
>  scripts/Makefile.kasan | 2 ++
>  1 file changed, 2 insertions(+)
>
> diff --git a/scripts/Makefile.kasan b/scripts/Makefile.kasan
> index 37323b0..9576775 100644
> --- a/scripts/Makefile.kasan
> +++ b/scripts/Makefile.kasan
> @@ -28,4 +28,6 @@ else
>          CFLAGS_KASAN := $(CFLAGS_KASAN_MINIMAL)
>      endif
>  endif
> +
> +CFLAGS_KASAN += $(call cc-option, -fsanitize-address-use-after-scope)
>  endif
> --

Doubled word "release release" on the first line of description.
But otherwise:
Acked-by: Dmitry Vyukov <dvyukov@...gle.com>

I've just submitted the corresponding gcc change:
https://gcc.gnu.org/viewcvs/gcc?view=revision&revision=243441