linux-kernel - Re: [PATCH 1/2] x86/vdso: Remove obsolete "fake section table" reservation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CALCETrWHhdMBxejzgTtykFUgifkNYj5zDfp04tn7JdftiSzFLw@mail.gmail.com>
Date:   Tue, 4 Dec 2018 10:58:51 -0800
From:   Andy Lutomirski <luto@...nel.org>
To:     "Christopherson, Sean J" <sean.j.christopherson@...el.com>
Cc:     Andrew Lutomirski <luto@...nel.org>,
        Thomas Gleixner <tglx@...utronix.de>,
        Ingo Molnar <mingo@...hat.com>, Borislav Petkov <bp@...en8.de>,
        X86 ML <x86@...nel.org>, "H. Peter Anvin" <hpa@...or.com>,
        LKML <linux-kernel@...r.kernel.org>
Subject: Re: [PATCH 1/2] x86/vdso: Remove obsolete "fake section table" reservation

On Tue, Dec 4, 2018 at 10:29 AM Sean Christopherson
<sean.j.christopherson@...el.com> wrote:
>
> On Tue, Dec 04, 2018 at 10:22:39AM -0800, Sean Christopherson wrote:
> > On Tue, Dec 04, 2018 at 08:17:40AM -0800, Sean Christopherson wrote:
> > > At one point the vDSO image was manually stripped down by vdso2c in an
> > > attempt to minimize the size of the image mapped into userspace.  Part
> > > of that stripping process involved building a fake section table so as
> > > not to break userspace processes that parse the section table.  Memory
> > > for the fake section table was reserved in the .rodata section so that
> > > vdso2c could simply copy the entire PT_LOAD segment into the userspace
> > > image after building the fake table.
> > >
> > > Eventually, the entire fake section table approach was dropped in favor
> > > of stripping the vdso "the old fashioned way", i.e. via objdump -S.
> > > But, the reservation in .rodata for the fake table was left behind.
> > > Remove the reserveration along with a few other related defines and
> > > section entries.
> > >
> > > Removing the fake section table placeholder zaps a whopping 0x340 bytes
> > > from the 64-bit vDSO image, which drops the current image's size to
> > > under 4k, i.e. reduces the effective size of the userspace vDSO mapping
> > > by a full page.
> > >
> > > Fixes: da861e18eccc ("x86, vdso: Get rid of the fake section mechanism")
> > > Cc: Andy Lutomirski <luto@...capital.net>
> > > Signed-off-by: Sean Christopherson <sean.j.christopherson@...el.com>
> > > ---
> > > diff --git a/arch/x86/entry/vdso/vdso2c.c b/arch/x86/entry/vdso/vdso2c.c
> > > index 4674f58581a1..2479a454b15c 100644
> > > --- a/arch/x86/entry/vdso/vdso2c.c
> > > +++ b/arch/x86/entry/vdso/vdso2c.c
> > > @@ -98,12 +98,6 @@ struct vdso_sym required_syms[] = {
> > >     [sym_hpet_page] = {"hpet_page", true},
> > >     [sym_pvclock_page] = {"pvclock_page", true},
> > >     [sym_hvclock_page] = {"hvclock_page", true},
> > > -   [sym_VDSO_FAKE_SECTION_TABLE_START] = {
> > > -           "VDSO_FAKE_SECTION_TABLE_START", false
> > > -   },
> > > -   [sym_VDSO_FAKE_SECTION_TABLE_END] = {
> > > -           "VDSO_FAKE_SECTION_TABLE_END", false
> > > -   },
> >
> > Doh, I missed removing the definitions for sym_VDSO_FAKE_SECTION_TABLE_*.
>
> And with sym_VDSO_FAKE_SECTION_TABLE_* gone all symbols are exported,
> meaning required_syms can be a char* array and struct vdso_sym can be
> removed.

I bet that we'll want that field to parse out the extable entries once
all the dust settles, though.

--Andy