linux-kernel - Re: [PATCH v3 0/2] scs: switch to vmapped shadow stacks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CABCJKue43YBrz7d3tYMiZxKJMPyyMku7TSUpcM2H+V6iTh+pfg@mail.gmail.com>
Date:   Tue, 1 Dec 2020 10:37:19 -0800
From:   Sami Tolvanen <samitolvanen@...gle.com>
To:     Will Deacon <will@...nel.org>
Cc:     Catalin Marinas <catalin.marinas@....com>,
        Android Kernel Team <kernel-team@...roid.com>,
        LKML <linux-kernel@...r.kernel.org>,
        James Morse <james.morse@....com>,
        Mark Rutland <mark.rutland@....com>,
        Ard Biesheuvel <ard.biesheuvel@...aro.org>,
        linux-arm-kernel <linux-arm-kernel@...ts.infradead.org>,
        Kees Cook <keescook@...omium.org>
Subject: Re: [PATCH v3 0/2] scs: switch to vmapped shadow stacks

On Tue, Dec 1, 2020 at 3:40 AM Will Deacon <will@...nel.org> wrote:
>
> On Mon, 30 Nov 2020 15:34:40 -0800, Sami Tolvanen wrote:
> > As discussed a few months ago [1][2], virtually mapped shadow call stacks
> > are better for safety and robustness. This series dusts off the VMAP
> > option from the original SCS patch series and switches the kernel to use
> > virtually mapped shadow stacks unconditionally when SCS is enabled.
> >
> >  [1] https://lore.kernel.org/lkml/20200515172355.GD23334@willie-the-truck/
> >  [2] https://lore.kernel.org/lkml/20200427220942.GB80713@google.com/
> >
> > [...]
>
> Applied to arm64 (for-next/scs), thanks!
>
> [1/2] scs: switch to vmapped shadow stacks
>       https://git.kernel.org/arm64/c/a2abe7cbd8fe
> [2/2] arm64: scs: use vmapped IRQ and SDEI shadow stacks
>       https://git.kernel.org/arm64/c/ac20ffbb0279
>
> I also threw a patch on top implementing the suggestion I made on v2, so
> please take a look if you get a chance.

Looks good to me, thanks for cleaning that up!

Sami