| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20170818112624.24991-1-ard.biesheuvel@linaro.org>
Date: Fri, 18 Aug 2017 12:26:18 +0100
From: Ard Biesheuvel <ard.biesheuvel@...aro.org>
To: linux-kernel@...r.kernel.org, linux-arch@...r.kernel.org
Cc: Ard Biesheuvel <ard.biesheuvel@...aro.org>,
"H. Peter Anvin" <hpa@...or.com>, Arnd Bergmann <arnd@...db.de>,
Heiko Carstens <heiko.carstens@...ibm.com>,
Kees Cook <keescook@...omium.org>,
Will Deacon <will.deacon@....com>,
Michael Ellerman <mpe@...erman.id.au>,
Thomas Garnier <thgarnie@...gle.com>,
Thomas Gleixner <tglx@...utronix.de>,
"Serge E. Hallyn" <serge@...lyn.com>,
Bjorn Helgaas <bhelgaas@...gle.com>,
Benjamin Herrenschmidt <benh@...nel.crashing.org>,
Paul Mackerras <paulus@...ba.org>,
Catalin Marinas <catalin.marinas@....com>,
Petr Mladek <pmladek@...e.com>, Ingo Molnar <mingo@...hat.com>,
James Morris <james.l.morris@...cle.com>,
Andrew Morton <akpm@...ux-foundation.org>,
Joe Perches <joe@...ches.com>, Nicolas Pitre <nico@...aro.org>,
Steven Rostedt <rostedt@...dmis.org>,
Martin Schwidefsky <schwidefsky@...ibm.com>,
Sergey Senozhatsky <sergey.senozhatsky@...il.com>,
Linus Torvalds <torvalds@...ux-foundation.org>,
Andy Whitcroft <apw@...onical.com>,
Jessica Yu <jeyu@...nel.org>
Subject: [PATCH v2 0/6] add support for relative references in special sections
This adds support for emitting special sections such as initcall arrays,
PCI fixups and tracepoints as relative references rather than absolute
references. This reduces the size by 50% on 64-bit architectures, but
more importantly, it removes the need for carrying relocation metadata
for these sections in relocatables kernels (e.g., for KASLR) that need
to fix up these absolute references at boot time. On arm64, this reduces
the vmlinux footprint of such a reference by 8x (8 byte absolute reference
+ 24 byte RELA entry vs 4 byte relative reference)
Patch #2 was sent out before as a single patch. This series supersedes
the previous submission. This version makes relative ksymtab entries
dependent on the new Kconfig symbol HAVE_ARCH_PREL32_RELOCATIONS rather
than trying to infer from kbuild test robot replies for which architectures
it should be blacklisted.
Patch #1 introduces the new Kconfig symbol HAVE_ARCH_PREL32_RELOCATIONS,
and sets it for the main architectures that are expected to benefit the
most from this feature, i.e., 64-bit architectures, and ones that use
runtime relocation.
Patch #3 fixes several instances where the trailing semicolon is missing
from an initcall() definition. (Needed for patch #4)
Patches #4 - #6 implement relative references for initcallls, PCI fixups
and tracepoints, respectively, all of which produce sections with order
~1000 entries on an arm64 defconfig kernel with tracing enabled. This
means we save about 28 KB of vmlinux space for each of these patches.
For the arm64 kernel, all patches combined reduce the size of vmlinux
by about 300 KB (with KASLR enabled).
Changes since v1:
- Remove checkpatch errors to the extent feasible: in some cases, this
involves moving extern declarations into C files, and switching to
struct definitions rather than typedefs. Some errors are impossible
to fix: please find the remaining ones after the diffstat.
- Used 'int' instead if 'signed int' for the various offset fields: there
is no ambiguity between architectures regarding its signedness (unlike
'char')
- Refactor the different patches to be more uniform in the way they define
the section entry type and accessors in the .h file, and avoid the need to
add #ifdefs to the C code.
Cc: "H. Peter Anvin" <hpa@...or.com>
Cc: Arnd Bergmann <arnd@...db.de>
Cc: Heiko Carstens <heiko.carstens@...ibm.com>
Cc: Kees Cook <keescook@...omium.org>
Cc: Will Deacon <will.deacon@....com>
Cc: Michael Ellerman <mpe@...erman.id.au>
Cc: Thomas Garnier <thgarnie@...gle.com>
Cc: Thomas Gleixner <tglx@...utronix.de>
Cc: "Serge E. Hallyn" <serge@...lyn.com>
Cc: Bjorn Helgaas <bhelgaas@...gle.com>
Cc: Benjamin Herrenschmidt <benh@...nel.crashing.org>
Cc: Paul Mackerras <paulus@...ba.org>
Cc: Catalin Marinas <catalin.marinas@....com>
Cc: Petr Mladek <pmladek@...e.com>
Cc: Ingo Molnar <mingo@...hat.com>
Cc: James Morris <james.l.morris@...cle.com>
Cc: Andrew Morton <akpm@...ux-foundation.org>
Cc: Joe Perches <joe@...ches.com>
Cc: Nicolas Pitre <nico@...aro.org>
Cc: Steven Rostedt <rostedt@...dmis.org>
Cc: Martin Schwidefsky <schwidefsky@...ibm.com>
Cc: Sergey Senozhatsky <sergey.senozhatsky@...il.com>
Cc: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: Andy Whitcroft <apw@...onical.com>
Cc: Jessica Yu <jeyu@...nel.org>
Ard Biesheuvel (6):
arch: enable relative relocations for arm64, power, x86, s390 and x86
module: use relative references for __ksymtab entries
treewide: add missing trailing semicolons to initcall() invocations
init: allow initcall tables to be emitted using relative references
drivers: pci: add support for relative addressing in quirk tables
kernel: tracepoints: add support for relative references
arch/Kconfig | 10 +++
arch/arm64/Kconfig | 1 +
arch/arm64/kernel/perf_event.c | 2 +-
arch/arm64/kernel/vmlinux.lds.S | 2 +-
arch/powerpc/Kconfig | 1 +
arch/s390/Kconfig | 1 +
arch/s390/hypfs/inode.c | 2 +-
arch/x86/Kconfig | 1 +
arch/x86/events/intel/core.c | 2 +-
arch/x86/include/asm/Kbuild | 1 +
arch/x86/include/asm/export.h | 4 --
drivers/net/cris/eth_v10.c | 2 +-
drivers/net/dsa/dsa_loop_bdinfo.c | 2 +-
drivers/parport/procfs.c | 4 +-
drivers/pci/quirks.c | 6 +-
drivers/perf/arm_pmu_acpi.c | 2 +-
drivers/platform/x86/intel_turbo_max_3.c | 2 +-
fs/hugetlbfs/inode.c | 2 +-
include/asm-generic/export.h | 12 +++-
include/linux/compiler.h | 11 ++++
include/linux/export.h | 68 ++++++++++++++++----
include/linux/init.h | 64 ++++++++++++++----
include/linux/pci.h | 32 +++++++++
include/linux/tracepoint.h | 42 ++++++++++--
init/main.c | 22 ++-----
kernel/module.c | 14 ++--
kernel/printk/printk.c | 4 +-
kernel/tracepoint.c | 7 +-
mm/compaction.c | 2 +-
mm/oom_kill.c | 2 +-
mm/page_alloc.c | 2 +-
mm/page_owner.c | 2 +-
net/core/lwt_bpf.c | 2 +-
net/sched/sch_blackhole.c | 2 +-
security/security.c | 6 +-
sound/core/seq_device.c | 4 +-
36 files changed, 256 insertions(+), 89 deletions(-)
delete mode 100644 arch/x86/include/asm/export.h
The following checkpatch errors cannot be fixed without breaking the
code, because inline asm at file scope cannot use parens or do-while
loops:
ERROR: Macros with complex values should be enclosed in parentheses
#201: FILE: include/linux/export.h:64:
+#define __KSYMTAB_ENTRY(sym, sec) \
+ __ADDRESSABLE(sym) \
+ asm(" .section \"___ksymtab" sec "+" #sym "\", \"a\"\n" \
+ " .balign 8\n" \
+ VMLINUX_SYMBOL_STR(__ksymtab_##sym) ":\n" \
+ " .long " VMLINUX_SYMBOL_STR(sym) "- .\n" \
+ " .long " VMLINUX_SYMBOL_STR(__kstrtab_##sym) "- .\n" \
+ " .previous\n")
ERROR: Macros with multiple statements should be enclosed in a do - while loop
#284: FILE: include/linux/init.h:162:
+#define ___define_initcall(fn, id, __sec) \
+ __ADDRESSABLE(fn) \
+ asm(".section \"" #__sec ".init\", \"a\"\n" \
+ "__initcall_" #fn #id ":\n" \
+ ".long " VMLINUX_SYMBOL_STR(fn) " - .\n" \
+ ".previous\n");
ERROR: Macros with complex values should be enclosed in parentheses
#375: FILE: include/linux/pci.h:1757:
+#define __DECLARE_PCI_FIXUP_SECTION(sec, name, vendor, device, class, \
+ class_shift, hook) \
+ __ADDRESSABLE(hook) \
+ asm(".section " #sec ", \"a\"\n" \
+ ".balign 16\n" \
+ ".short " #vendor ", " #device "\n" \
+ ".long " #class ", " #class_shift "\n" \
+ ".long " VMLINUX_SYMBOL_STR(hook) " - .\n" \
+ ".previous\n")
The following errors:
ERROR: space required after that ',' (ctx:VxO)
#446: FILE: include/linux/init.h:250:
+#define console_initcall(fn) ___define_initcall(fn,, .con_initcall)
^
ERROR: space required after that ',' (ctx:VxO)
#447: FILE: include/linux/init.h:251:
+#define security_initcall(fn) ___define_initcall(fn,, .security_initcall)
^
cannot be fixed because attempting so results in:
ERROR: space prohibited before that ',' (ctx:WxW)
#349: FILE: include/linux/init.h:250:
+#define console_initcall(fn) ___define_initcall(fn, , .con_initcall)
^
ERROR: space prohibited before that ',' (ctx:WxW)
#350: FILE: include/linux/init.h:251:
+#define security_initcall(fn) ___define_initcall(fn, , .security_initcall)
^
Powered by blists - more mailing lists