linux-kernel - Re: [kernel-hardening] [PATCH v5 03/32] x86/cpa: In populate_pgd, don't set the pgd entry until it's populated

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:	Thu, 28 Jul 2016 05:26:47 -0400
From:	Valdis.Kletnieks@...edu
To:	Nicolai Stange <nicstange@...il.com>
Cc:	Andy Lutomirski <luto@...nel.org>,
	kernel-hardening@...ts.openwall.com, x86@...nel.org,
	linux-kernel@...r.kernel.org, linux-arch@...r.kernel.org,
	Borislav Petkov <bp@...en8.de>,
	Nadav Amit <nadav.amit@...il.com>,
	Kees Cook <keescook@...omium.org>,
	Brian Gerst <brgerst@...il.com>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	Josh Poimboeuf <jpoimboe@...hat.com>,
	Jann Horn <jann@...jh.net>,
	Heiko Carstens <heiko.carstens@...ibm.com>,
	Ingo Molnar <mingo@...nel.org>
Subject: Re: [kernel-hardening] [PATCH v5 03/32] x86/cpa: In populate_pgd, don't set the pgd entry until it's populated

On Sat, 23 Jul 2016 16:58:16 +0200, Nicolai Stange said:
> Valdis.Kletnieks@...edu writes:

> The reason the patch didn't work for Valdis might be that there is
> another issue in next-20150722 with the same symptoms (provided you
> don't watch the serial console). Valdis, did you apply the provided
> patch on top of next?

Sorry, am on vacation, and no option for a serial console, that's why
I missed the part about there being *two* issues...

> The "other issue" is:
>
> (...)
>  [<ffffffffb6055487>] load_microcode.isra.1.constprop.12+0x37/0xa0

> I bisected this one to 21ef9a5c3164 ("Merge branch 'x86/microcode'"). Both
> of its parents do not exhibit that behaviour.  This merge's author is
> Ingo Molnar, so I added him to the CC list.

Confirming that I'm up and running on next-20160727 plus Borislav's patch:

Subject: [PATCH -v2 2/2] x86/microcode/intel: Fix initrd loading with  CONFIG_RANDOMIZE_MEMORY

with USERCOPY, Andy Lutomirski's stack/thread cleanup work, and microcode loading
from initramfs all working....




Content of type "application/pgp-signature" skipped