lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <202008031150.63BAD93@keescook>
Date:   Mon, 3 Aug 2020 11:51:29 -0700
From:   Kees Cook <keescook@...omium.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org,
        "Alexander A. Klimov" <grandmaster@...klimov.de>,
        Alexander Popov <alex.popov@...ux.com>,
        Kees Cook <keescook@...omium.org>,
        Miguel Ojeda <miguel.ojeda.sandonis@...il.com>
Subject: [GIT PULL] gcc-plugins updates for v5.9-rc1

Hi Linus,

Please pull these gcc-plugins updates for v5.9-rc1. It is primarily
improvements to STACKLEAK from Alexander Popov, along with some additional
cleanups.

Thanks!

-Kees

The following changes since commit 48778464bb7d346b47157d21ffde2af6b2d39110:

  Linux 5.8-rc2 (2020-06-21 15:45:29 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/gcc-plugins-v5.9-rc1

for you to fetch changes up to 496b24ec6d47f2d304a0c5836ba4b1bb5d30bab8:

  gcc-plugins: Replace HTTP links with HTTPS ones (2020-07-13 09:29:09 -0700)

----------------------------------------------------------------
GCC plugins updates for v5.9-rc1

- Update URLs for HTTPS scheme where available (Alexander A. Klimov)
- Improve STACKLEAK code generation on x86 (Alexander Popov)

----------------------------------------------------------------
Alexander A. Klimov (1):
      gcc-plugins: Replace HTTP links with HTTPS ones

Alexander Popov (4):
      gcc-plugins/stackleak: Don't instrument itself
      ARM: vdso: Don't use gcc plugins for building vgettimeofday.c
      gcc-plugins/stackleak: Use asm instrumentation to avoid useless register saving
      gcc-plugins/stackleak: Add 'verbose' plugin parameter

 arch/arm/vdso/Makefile                      |   2 +-
 include/linux/compiler_attributes.h         |  13 ++
 kernel/Makefile                             |   1 +
 kernel/stackleak.c                          |  16 +-
 scripts/Makefile.gcc-plugins                |   2 +
 scripts/gcc-plugins/cyc_complexity_plugin.c |   2 +-
 scripts/gcc-plugins/sancov_plugin.c         |   2 +-
 scripts/gcc-plugins/stackleak_plugin.c      | 248 ++++++++++++++++++++++++----
 scripts/gcc-plugins/structleak_plugin.c     |   2 +-
 9 files changed, 241 insertions(+), 47 deletions(-)

-- 
Kees Cook

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ