linux-kernel - [GIT PULL] bounds fixes for v5.18-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 21 Mar 2022 08:52:31 -0700
From:   Kees Cook <keescook@...omium.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org,
        Alexander Shishkin <alexander.shishkin@...ux.intel.com>,
        Arnd Bergmann <arnd@...db.de>,
        Geert Uytterhoeven <geert@...ux-m68k.org>,
        Greg Ungerer <gerg@...ux-m68k.org>,
        Guenter Roeck <linux@...ck-us.net>,
        "Gustavo A. R. Silva" <gustavoars@...nel.org>,
        Ivan Kokshaysky <ink@...assic.park.msu.ru>,
        Jarkko Sakkinen <jarkko@...nel.org>,
        Jason Gunthorpe <jgg@...pe.ca>,
        Kees Cook <keescook@...omium.org>,
        Laurent Pinchart <laurent.pinchart@...asonboard.com>,
        Mark Rutland <mark.rutland@....com>,
        Matt Turner <mattst88@...il.com>,
        Mauro Carvalho Chehab <mchehab@...nel.org>,
        Peter Huewe <peterhuewe@....de>,
        "Peter Zijlstra (Intel)" <peterz@...radead.org>,
        Richard Henderson <rth@...ddle.net>,
        Sakari Ailus <sakari.ailus@...ux.intel.com>,
        Sean Christopherson <seanjc@...gle.com>,
        Stefan Berger <stefanb@...ux.ibm.com>
Subject: [GIT PULL] bounds fixes for v5.18-rc1

Hi Linus,

Please pull these scattered buffer and array bounds fixes for v5.18-rc1.
These are a handful of fixes that I've been carrying in -next in
preparation for the coming memcpy improvements and the enabling of
-Warray-bounds globally. There are additional similar fixes in other
maintainer's trees, but these ended up getting carried by me. :)

Thanks!

-Kees

The following changes since commit dfd42facf1e4ada021b939b4e19c935dcdd55566:

  Linux 5.17-rc3 (2022-02-06 12:20:50 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/bounds-fixes-v5.18-rc1

for you to fetch changes up to fad278388e01e3658a356118bed8ee2c2408d280:

  media: omap3isp: Use struct_group() for memcpy() region (2022-02-27 10:58:04 -0800)

----------------------------------------------------------------
bounds-fixes updates for v5.18-rc1

- Various buffer and array bounds related fixes

----------------------------------------------------------------
Kees Cook (5):
      intel_th: msu: Use memset_startat() for clearing hw header
      m68k: cmpxchg: Dereference matching size
      alpha: Silence -Warray-bounds warnings
      tpm: vtpm_proxy: Check length to avoid compiler warning
      media: omap3isp: Use struct_group() for memcpy() region

Sean Christopherson (1):
      KVM: x86: Replace memset() "optimization" with normal per-field writes

 arch/alpha/mm/init.c                      |  6 +++---
 arch/m68k/include/asm/cmpxchg.h           |  9 ++++-----
 arch/x86/kvm/emulate.c                    |  9 +++++++--
 arch/x86/kvm/kvm_emulate.h                |  6 +-----
 drivers/char/tpm/tpm_vtpm_proxy.c         |  2 +-
 drivers/hwtracing/intel_th/msu.c          |  4 +---
 drivers/media/platform/omap3isp/ispstat.c |  5 +++--
 include/uapi/linux/omap3isp.h             | 21 +++++++++++++--------
 8 files changed, 33 insertions(+), 29 deletions(-)

-- 
Kees Cook