linux-hardening - Re: [PATCH 1/5] pstore: add tty frontend

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <2023092804-backslid-ninth-3afe@gregkh>
Date: Thu, 28 Sep 2023 08:43:22 +0200
From: Greg KH <gregkh@...uxfoundation.org>
To: Yuanhe Shu <xiangzao@...ux.alibaba.com>
Cc: jirislaby@...nel.org, keescook@...omium.org, tony.luck@...el.com,
	gpiccoli@...lia.com, shuah@...nel.org, linux-kernel@...r.kernel.org,
	linux-serial@...r.kernel.org, linux-hardening@...r.kernel.org,
	linux-kselftest@...r.kernel.org,
	Xingrui Yi <yixingrui@...ux.alibaba.com>
Subject: Re: [PATCH 1/5] pstore: add tty frontend

On Thu, Sep 28, 2023 at 10:42:40AM +0800, Yuanhe Shu wrote:
> Provide a pstore frontend which can log all messages that are send
> to tty drivers when there are some problems with drivers or there
> is no access to serial ports.
> 
> Using pmsg requires us to redirect the output of the user state.
> When we need to globally view the serial output of various processes,
> it is tedious to redirect the output of each process. We think pmsg is
> more suitable for targeted viewing of certain processes' output, and
> we also need a tool that can quickly do a global view so that we can
> get user-state printed data if the tty driver is working abnormally or
> if we don't have serial access.
> 
> Furthermore, by enabling tty frontend and console/dmesg frontend in
> dump capture kernel, one can collect kernel and user messages to
> discover why kdump service works abnormal.
> 
> Signed-off-by: Yuanhe Shu <xiangzao@...ux.alibaba.com>
> Signed-off-by: Xingrui Yi <yixingrui@...ux.alibaba.com>
> ---
>  drivers/tty/n_tty.c         |  1 +
>  fs/pstore/Kconfig           | 23 +++++++++++++++++
>  fs/pstore/Makefile          |  2 ++
>  fs/pstore/blk.c             | 10 ++++++++
>  fs/pstore/internal.h        |  8 ++++++
>  fs/pstore/platform.c        |  5 ++++
>  fs/pstore/ram.c             | 40 +++++++++++++++++++++++++++--
>  fs/pstore/tty.c             | 50 +++++++++++++++++++++++++++++++++++++
>  fs/pstore/zone.c            | 42 ++++++++++++++++++++++++++++++-
>  include/linux/pstore.h      |  2 ++
>  include/linux/pstore_blk.h  |  3 +++
>  include/linux/pstore_ram.h  |  1 +
>  include/linux/pstore_zone.h |  2 ++
>  include/linux/tty.h         | 14 +++++++++++
>  14 files changed, 200 insertions(+), 3 deletions(-)
>  create mode 100644 fs/pstore/tty.c
> 
> diff --git a/drivers/tty/n_tty.c b/drivers/tty/n_tty.c
> index 552e8a741562..55ca40605e4c 100644
> --- a/drivers/tty/n_tty.c
> +++ b/drivers/tty/n_tty.c
> @@ -582,6 +582,7 @@ static ssize_t process_output_block(struct tty_struct *tty,
>  		}
>  	}
>  break_out:
> +	tty_pstore_hook(buf, i);

"hook"?  That does not help explain what this is doing here at all.  A
better name would be best, but why is this part of n_tty at all?  Why
isn't it a console driver just for this, you are sitting in the middle
of the fast-path of the tty layer sucking in data all the time, what is
the performance impact of this extra jump?

> --- a/fs/pstore/blk.c
> +++ b/fs/pstore/blk.c
> @@ -52,6 +52,14 @@ static long ftrace_size = -1;
>  module_param(ftrace_size, long, 0400);
>  MODULE_PARM_DESC(ftrace_size, "ftrace size in kbytes");
>  
> +#if IS_ENABLED(CONFIG_PSTORE_TTY)
> +static long tty_size = CONFIG_PSTORE_BLK_TTY_SIZE;
> +#else
> +static long tty_size = -1;
> +#endif
> +module_param(tty_size, long, 0400);
> +MODULE_PARM_DESC(tty_size, "tty_size size in kbytes");

Do we really need more module parameters that are undocumented?

> diff --git a/fs/pstore/ram.c b/fs/pstore/ram.c
> index 2f625e1fa8d8..f59712bc51d3 100644
> --- a/fs/pstore/ram.c
> +++ b/fs/pstore/ram.c
> @@ -44,6 +44,10 @@ static ulong ramoops_pmsg_size = MIN_MEM_SIZE;
>  module_param_named(pmsg_size, ramoops_pmsg_size, ulong, 0400);
>  MODULE_PARM_DESC(pmsg_size, "size of user space message log");
>  
> +static ulong ramoops_tty_size = MIN_MEM_SIZE;
> +module_param_named(tty_size, ramoops_tty_size, ulong, 0400);
> +MODULE_PARM_DESC(tty_size, "size of tty message log");

Again, why a module parameter?

> --- /dev/null
> +++ b/fs/pstore/tty.c
> @@ -0,0 +1,50 @@
> +// SPDX-License-Identifier: GPL-2.0
> +/*
> + * Provide a pstore frontend which can log all messages that are send
> + * to tty drivers when there are some problems with drivers or there
> + * is no access to serial ports.
> + */

No copyright line?  Are you sure your company is ok with that?

> +
> +#include <linux/kernel.h>
> +#include <linux/tty.h>
> +#include <linux/tty_driver.h>
> +#include "internal.h"
> +
> +DEFINE_STATIC_KEY_FALSE(tty_key);
> +
> +#define TTY_NAME "tty"
> +#undef pr_fmt
> +#define pr_fmt(fmt) TTY_NAME ": " fmt
> +
> +static void do_write_ttymsg(const unsigned char *buf, int count,
> +							struct pstore_info *psinfo)

Odd formatting :(


> +{
> +	struct pstore_record record, newline;
> +
> +	pstore_record_init(&record, psinfo);
> +	record.type = PSTORE_TYPE_TTY;
> +	record.size = count;
> +	record.buf = (char *)buf;

Why the casting?  Why isn't the buffer a u8 * here?

> +	psinfo->write(&record);
> +
> +	pstore_record_init(&newline, psinfo);
> +	newline.type = PSTORE_TYPE_TTY;
> +	newline.size = strlen("\n");
> +	newline.buf = "\n";
> +	psinfo->write(&newline);

Why have 2 structures and not just one?  And why the new line all the
time, you are not guaranteed that your buffer must have a new line here,
it could be in the middle of a hunk of data that is longer than the
normal buffer size.  Why not rely on the tty data to handle the new line
stuff for you in the proper location?

thanks,

greg k-h