linux-kernel - Re: [PATCH v17 0/9] Compile-time stack metadata validation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 25 Feb 2016 09:02:04 +0100
From:	Ingo Molnar <mingo@...nel.org>
To:	Josh Poimboeuf <jpoimboe@...hat.com>
Cc:	Thomas Gleixner <tglx@...utronix.de>,
	Ingo Molnar <mingo@...hat.com>,
	"H. Peter Anvin" <hpa@...or.com>, x86@...nel.org,
	linux-kernel@...r.kernel.org, live-patching@...r.kernel.org,
	Michal Marek <mmarek@...e.cz>,
	Peter Zijlstra <peterz@...radead.org>,
	Andy Lutomirski <luto@...nel.org>,
	Borislav Petkov <bp@...en8.de>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Andi Kleen <andi@...stfloor.org>,
	Pedro Alves <palves@...hat.com>,
	Namhyung Kim <namhyung@...il.com>,
	Bernd Petrovitsch <bernd@...rovitsch.priv.at>,
	Chris J Arges <chris.j.arges@...onical.com>,
	Andrew Morton <akpm@...ux-foundation.org>,
	Jiri Slaby <jslaby@...e.cz>,
	Arnaldo Carvalho de Melo <acme@...nel.org>,
	David Vrabel <david.vrabel@...rix.com>,
	Konrad Rzeszutek Wilk <konrad.wilk@...cle.com>,
	Boris Ostrovsky <boris.ostrovsky@...cle.com>,
	Daniel Borkmann <daniel@...earbox.net>,
	Alexei Starovoitov <ast@...nel.org>, netdev@...r.kernel.org,
	Ananth N Mavinakayanahalli <ananth@...ibm.com>,
	Anil S Keshavamurthy <anil.s.keshavamurthy@...el.com>,
	"David S. Miller" <davem@...emloft.net>,
	Masami Hiramatsu <masami.hiramatsu.pt@...achi.com>
Subject: Re: [PATCH v17 0/9] Compile-time stack metadata validation


* Josh Poimboeuf <jpoimboe@...hat.com> wrote:

> This is v17 of the compile-time stack metadata validation patch set.
> 
> It's based on tip:x86/debug.  However, note that when run against that
> branch it will give a lot of warnings:
> 
>   objtool: arch/x86/ia32/sys_ia32.o: __ex_table size not a multiple of 12
>   objtool: arch/x86/ia32/ia32_signal.o: __ex_table size not a multiple of 12
>   objtool: arch/x86/entry/common.o: __ex_table size not a multiple of 12
>   ...
> 
> These warnings means that objtool is expecting the new exception table
> format which was introduced with:
> 
>   548acf19234d ("x86/mm: Expand the exception table logic to allow new handling options")
> 
> So that commit is needed for those warnings to go away.

Ok. I have created a new topic branch for the objtool commits: tip:core/objtool, 
and merged tip:ras/core into it (which hosts 548acf19234d).

So please use tip:core/objtool as a base from now on.

Two more minor observations:

Please re-order the patches slightly so that the annotations are added first, and 
objtool is added and Kconfig-enabled in the final patches.

>   x86/objtool: Compile-time stack metadata validation
>   x86/objtool: Add CONFIG_STACK_VALIDATION option
>   x86/objtool: Enable objtool on x86_64
>   x86/objtool: Add STACK_FRAME_NON_STANDARD macro
>   x86/objtool: Add directory and file whitelists

btw., please use the more generic 'objtool: ' prefix, the concept is not 
fundamentally x86 specific - especially once dwarf debuginfo is interpreted it 
will be useful beyond x86 as well I suspect.

>   x86/xen: Add xen_cpuid() to objtool whitelist
>   bpf: Add __bpf_prog_run() to objtool whitelist
>   sched: Add __schedule() to objtool whitelist
>   x86/kprobes: Add kretprobe_trampoline() to objtool whitelist

Thanks,

	Ingo