linux-kernel - Re: [PATCH v4 0/7] SLAB support for KASAN

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Wed, 9 Mar 2016 12:12:29 +0100
From:	Alexander Potapenko <glider@...gle.com>
To:	Andrey Konovalov <adech.fo@...il.com>,
	Christoph Lameter <cl@...ux.com>,
	Dmitriy Vyukov <dvyukov@...gle.com>,
	Andrew Morton <akpm@...ux-foundation.org>,
	Andrey Ryabinin <ryabinin.a.a@...il.com>,
	Steven Rostedt <rostedt@...dmis.org>,
	Joonsoo Kim <iamjoonsoo.kim@....com>,
	JoonSoo Kim <js1304@...il.com>,
	Kostya Serebryany <kcc@...gle.com>
Cc:	kasan-dev <kasan-dev@...glegroups.com>,
	LKML <linux-kernel@...r.kernel.org>,
	Linux Memory Management List <linux-mm@...ck.org>
Subject: Re: [PATCH v4 0/7] SLAB support for KASAN

Sorry, this cover letter had incorrect version, I've resent it with
the corrected one.

On Wed, Mar 9, 2016 at 12:05 PM, Alexander Potapenko <glider@...gle.com> wrote:
> This patch set implements SLAB support for KASAN
>
> Unlike SLUB, SLAB doesn't store allocation/deallocation stacks for heap
> objects, therefore we reimplement this feature in mm/kasan/stackdepot.c.
> The intention is to ultimately switch SLUB to use this implementation as
> well, which will save a lot of memory (right now SLUB bloats each object
> by 256 bytes to store the allocation/deallocation stacks).
>
> Also neither SLUB nor SLAB delay the reuse of freed memory chunks, which
> is necessary for better detection of use-after-free errors. We introduce
> memory quarantine (mm/kasan/quarantine.c), which allows delayed reuse of
> deallocated memory.
>
> Alexander Potapenko (7):
>   kasan: Modify kmalloc_large_oob_right(), add
>     kmalloc_pagealloc_oob_right()
>   mm, kasan: SLAB support
>   mm, kasan: Added GFP flags to KASAN API
>   arch, ftrace: For KASAN put hard/soft IRQ entries into separate
>     sections
>   mm, kasan: Stackdepot implementation. Enable stackdepot for SLAB
>   kasan: Test fix: Warn if the UAF could not be detected in kmalloc_uaf2
>   mm: kasan: Initial memory quarantine implementation
> ---
> v2: - merged two patches that touched kmalloc_large_oob_right
>     - moved stackdepot implementation to lib/
>     - moved IRQ definitions to include/linux/interrupt.h
>
> v3: - minor description changes
>     - store deallocation info in the "mm, kasan: SLAB support" patch
>
> v4: - fix kbuild error reports
>
> v5: - SLAB allocator, stackdepot: adopted suggestions by Andrey Ryabinin
>     - IRQ: fixed kbuild warnings
> ---
>
>  Documentation/kasan.txt              |   5 +-
>  arch/arm/include/asm/exception.h     |   2 +-
>  arch/arm/kernel/vmlinux.lds.S        |   1 +
>  arch/arm64/include/asm/exception.h   |   2 +-
>  arch/arm64/kernel/vmlinux.lds.S      |   1 +
>  arch/blackfin/kernel/vmlinux.lds.S   |   1 +
>  arch/c6x/kernel/vmlinux.lds.S        |   1 +
>  arch/metag/kernel/vmlinux.lds.S      |   1 +
>  arch/microblaze/kernel/vmlinux.lds.S |   1 +
>  arch/mips/kernel/vmlinux.lds.S       |   1 +
>  arch/nios2/kernel/vmlinux.lds.S      |   1 +
>  arch/openrisc/kernel/vmlinux.lds.S   |   1 +
>  arch/parisc/kernel/vmlinux.lds.S     |   1 +
>  arch/powerpc/kernel/vmlinux.lds.S    |   1 +
>  arch/s390/kernel/vmlinux.lds.S       |   1 +
>  arch/sh/kernel/vmlinux.lds.S         |   1 +
>  arch/sparc/kernel/vmlinux.lds.S      |   1 +
>  arch/tile/kernel/vmlinux.lds.S       |   1 +
>  arch/x86/kernel/Makefile             |   1 +
>  arch/x86/kernel/vmlinux.lds.S        |   1 +
>  include/asm-generic/vmlinux.lds.h    |  12 +-
>  include/linux/ftrace.h               |  11 --
>  include/linux/interrupt.h            |  20 +++
>  include/linux/kasan.h                |  63 ++++++--
>  include/linux/slab.h                 |  10 +-
>  include/linux/slab_def.h             |  14 ++
>  include/linux/slub_def.h             |  11 ++
>  include/linux/stackdepot.h           |  32 ++++
>  kernel/softirq.c                     |   2 +-
>  kernel/trace/trace_functions_graph.c |   1 +
>  lib/Kconfig                          |   3 +
>  lib/Kconfig.kasan                    |   5 +-
>  lib/Makefile                         |   3 +
>  lib/stackdepot.c                     | 275 +++++++++++++++++++++++++++++++
>  lib/test_kasan.c                     |  59 ++++++-
>  mm/Makefile                          |   1 +
>  mm/kasan/Makefile                    |   4 +
>  mm/kasan/kasan.c                     | 221 +++++++++++++++++++++++--
>  mm/kasan/kasan.h                     |  45 ++++++
>  mm/kasan/quarantine.c                | 306 +++++++++++++++++++++++++++++++++++
>  mm/kasan/report.c                    |  64 ++++++--
>  mm/mempool.c                         |  23 +--
>  mm/page_alloc.c                      |   2 +-
>  mm/slab.c                            |  53 +++++-
>  mm/slab.h                            |   4 +-
>  mm/slab_common.c                     |   8 +-
>  mm/slub.c                            |  19 +--
>  47 files changed, 1205 insertions(+), 92 deletions(-)
>  create mode 100644 include/linux/stackdepot.h
>  create mode 100644 lib/stackdepot.c
>  create mode 100644 mm/kasan/quarantine.c
>
> --
> 2.7.0.rc3.207.g0ac5344
>



-- 
Alexander Potapenko
Software Engineer

Google Germany GmbH
Erika-Mann-Straße, 33
80636 München

Geschäftsführer: Matthew Scott Sucherman, Paul Terence Manicle
Registergericht und -nummer: Hamburg, HRB 86891
Sitz der Gesellschaft: Hamburg