linux-kernel - Re: [PATCH 2/2] Kbuild: lto: add make version checking

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <6d687b9a-c295-ce8b-9472-d2859977be2d@kernel.org>
Date:   Wed, 30 Jun 2021 10:08:48 -0700
From:   Nathan Chancellor <nathan@...nel.org>
To:     Lecopzer Chen <lecopzer.chen@...iatek.com>, keescook@...omium.org,
        samitolvanen@...gle.com, linux-kbuild@...r.kernel.org
Cc:     clang-built-linux@...glegroups.com, linux-kernel@...r.kernel.org,
        yj.chiang@...iatek.com, masahiroy@...nel.org,
        michal.lkml@...kovi.net
Subject: Re: [PATCH 2/2] Kbuild: lto: add make version checking

On 6/30/2021 5:14 AM, Lecopzer Chen wrote:
> LTO with MODVERSION will fail in generating correct CRC because
> the makefile rule doesn't work for make with version 3.8X.[1]
> 
> Thus we need to check make version during selecting on LTO Kconfig.
> and the suitable version should be 4.2(40200) which release in 2016[2].
> 
> [1] https://lore.kernel.org/lkml/20210616080252.32046-1-lecopzer.chen@mediatek.com/
> [2] https://ftp.gnu.org/gnu/make/
> Signed-off-by: Lecopzer Chen <lecopzer.chen@...iatek.com>
> ---
>   arch/Kconfig | 1 +
>   1 file changed, 1 insertion(+)
> 
> diff --git a/arch/Kconfig b/arch/Kconfig
> index c45b770d3579..1571957bade5 100644
> --- a/arch/Kconfig
> +++ b/arch/Kconfig
> @@ -632,6 +632,7 @@ config HAS_LTO_CLANG
>   	def_bool y
>   	# Clang >= 11: https://github.com/ClangBuiltLinux/linux/issues/510
>   	depends on CC_IS_CLANG && CLANG_VERSION >= 110000 && LD_IS_LLD && AS_IS_LLVM
> +	depends on MAKE_VERSION_INT >= 40200

If the bug depends on CONFIG_MODVERSIONS, should this be

depends on !MODVERSIONS || MAKE_VERSION >= 40200

? Especially since the problematic block in your original report is 
gated on CONFIG_LTO_CLANG + CONFIG_MODVERSIONS.

>   	depends on $(success,$(NM) --help | head -n 1 | grep -qi llvm)
>   	depends on $(success,$(AR) --help | head -n 1 | grep -qi llvm)
>   	depends on ARCH_SUPPORTS_LTO_CLANG
>