linux-kernel - Re: [PATCH v4 13/15] livepatch: change to a per-task consistency model

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 7 Feb 2017 09:21:49 +0100 (CET)
From:   Miroslav Benes <mbenes@...e.cz>
To:     Josh Poimboeuf <jpoimboe@...hat.com>
cc:     Jessica Yu <jeyu@...hat.com>, Jiri Kosina <jikos@...nel.org>,
        Petr Mladek <pmladek@...e.com>, linux-kernel@...r.kernel.org,
        live-patching@...r.kernel.org,
        Michael Ellerman <mpe@...erman.id.au>,
        Heiko Carstens <heiko.carstens@...ibm.com>, x86@...nel.org,
        linuxppc-dev@...ts.ozlabs.org, linux-s390@...r.kernel.org,
        Vojtech Pavlik <vojtech@...e.com>, Jiri Slaby <jslaby@...e.cz>,
        Chris J Arges <chris.j.arges@...onical.com>,
        Andy Lutomirski <luto@...nel.org>,
        Ingo Molnar <mingo@...nel.org>,
        Peter Zijlstra <peterz@...radead.org>,
        Kamalesh Babulal <kamalesh@...ux.vnet.ibm.com>,
        Balbir Singh <bsingharora@...il.com>
Subject: Re: [PATCH v4 13/15] livepatch: change to a per-task consistency
 model


> > And finally, the section "Limitations" has this text under the first 
> > bullet:
> > 
> >   + The patch must not change the semantic of the patched functions.
> > 
> >     The current implementation guarantees only that either the old
> >     or the new function is called. The functions are patched one
> >     by one. It means that the patch must _not_ change the semantic
> >     of the function.
> > 
> > I think it is confusing. The consistency model allows us to change the 
> > semantic of a function. To certain degree. Of course, there are cases that 
> > cannot be patched, or have to be patched carefully. For example if a 
> > function takes a lock by calling foo_lock(), foo_lock() is not on a stack 
> > afterwards. Then the locking semantics may be changed with a livepatch. 
> > One has to make sure to patch also the caller foo_lock() to enforce the 
> > consistency. And so on... But I do not consider a limitation of livepatch. 
> > It is a feature of the consistency model, which is weaker than kGraft's or 
> > kpatch's (or stronger. It depends on your point of view.)
> > 
> > So, I propose to remove this text and better describe the properties of 
> > the consistency model above in the section 3. Maybe a quote from an old 
> > mail thread (Nov 2014) would be sufficient. I don't remember what was 
> > mentioned and what not.
> > 
> > What do you think?
> 
> I'll remove the above limitation.
> 
> I'm not sure how to improve the consistency model section.  It already
> has at least some mentions of changed function semantics and locking
> semantics.  I'll leave it alone for now, unless you have a specific
> suggestion.

Fair enough. Let's see if I can come up with something.
 
> > > diff --git a/include/linux/livepatch.h b/include/linux/livepatch.h
> > > index 6602b34..ed90ad1 100644
> > > --- a/include/linux/livepatch.h
> > > +++ b/include/linux/livepatch.h
> > > @@ -68,7 +92,7 @@ struct klp_func {
> > >   * @funcs:	function entries for functions to be patched in the object
> > >   * @kobj:	kobject for sysfs resources
> > >   * @mod:	kernel module associated with the patched object
> > > - * 		(NULL for vmlinux)
> > > + *		(NULL for vmlinux)
> > 
> > This looks superfluous.
> 
> This is a minor whitespace fix -- remove a space before tab.  I figured
> I'd go ahead and fix it since I'm already changing some of the
> surrounding code.

Ok, no problem.

Thanks,
Miroslav