lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <202203210740.98EB66F8@keescook>
Date:   Mon, 21 Mar 2022 07:44:54 -0700
From:   Kees Cook <keescook@...omium.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org,
        Akira Kawata <akirakawata1@...il.com>,
        Alexander Viro <viro@...iv.linux.org.uk>,
        Alexey Dobriyan <adobriyan@...il.com>,
        Andrew Morton <akpm@...ux-foundation.org>,
        Andy Lutomirski <luto@...nel.org>,
        Ariadne Conill <ariadne@...eferenced.org>,
        Bill Messmer <wmessmer@...rosoft.com>,
        Catalin Marinas <catalin.marinas@....com>,
        Christian Brauner <brauner@...nel.org>,
        Dave Martin <Dave.Martin@....com>,
        David Gow <davidgow@...gle.com>,
        Eric Biederman <ebiederm@...ssion.com>,
        Geert Uytterhoeven <geert@...ux-m68k.org>,
        Ivan Kokshaysky <ink@...assic.park.msu.ru>,
        Jann Horn <jannh@...gle.com>,
        Kees Cook <keescook@...omium.org>,
        Magnus Groß <magnus.gross@...h-aachen.de>,
        Matthew Wilcox <willy@...radead.org>,
        Matt Turner <mattst88@...il.com>,
        Michael Kerrisk <mtk.manpages@...il.com>,
        Peter Collingbourne <pcc@...gle.com>,
        Randy Dunlap <rdunlap@...radead.org>,
        Richard Henderson <rth@...ddle.net>,
        Rich Felker <dalias@...c.org>,
        Rick Edgecombe <rick.p.edgecombe@...el.com>,
        Shuah Khan <shuah@...nel.org>, Tom Rix <trix@...hat.com>,
        Yang Yingliang <yangyingliang@...wei.com>,
        Yu-cheng Yu <yu-cheng.yu@...el.com>
Subject: [GIT PULL] execve updates for v5.18-rc1

Hi Linus,

Please pull these execve and binfmt updates for v5.18-rc1. Eric and I
have stepped up to be the active maintainers of this area, so here's our
first collection. The bulk of the work was in coredump handling fixes;
additional details are noted below.

Thanks!

-Kees

The following changes since commit 439a8468242b313486e69b8cc3b45ddcfa898fbf:

  binfmt_elf: Avoid total_mapping_size for ET_EXEC (2022-03-01 10:29:20 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/execve-v5.18-rc1

for you to fetch changes up to dd664099002db909912a23215f8775c97f7f4f10:

  binfmt_elf: Don't write past end of notes for regset gap (2022-03-18 10:17:09 -0700)

----------------------------------------------------------------
execve updates for v5.18-rc1

- Handle unusual AT_PHDR offsets (Akira Kawata)
- Fix initial mapping size when PT_LOADs are not ordered (Alexey Dobriyan)
- Move more code under CONFIG_COREDUMP (Alexey Dobriyan)
- Fix missing mmap_lock in file_files_note (Eric W. Biederman)
- Remove a.out support for alpha and m68k (Eric W. Biederman)
- Include first pages of non-exec ELF libraries in coredump (Jann Horn)
- Don't write past end of notes for regset gap in coredump (Rick Edgecombe)
- Comment clean-ups (Tom Rix)
- Force single empty string when argv is empty (Kees Cook)
- Add NULL argv selftest (Kees Cook)
- Properly redefine PT_GNU_* in terms of PT_LOOS (Kees Cook)
- MAINTAINERS: Update execve entry with tree (Kees Cook)
- Introduce initial KUnit testing for binfmt_elf (Kees Cook)

----------------------------------------------------------------
Akira Kawata (2):
      fs/binfmt_elf: Fix AT_PHDR for unusual ELF files
      fs/binfmt_elf: Refactor load_elf_binary function

Alexey Dobriyan (2):
      ELF: fix overflow in total mapping size calculation
      binfmt: move more stuff undef CONFIG_COREDUMP

Eric W. Biederman (7):
      coredump: Move definition of struct coredump_params into coredump.h
      coredump: Snapshot the vmas in do_coredump
      coredump: Remove the WARN_ON in dump_vma_snapshot
      coredump/elf: Pass coredump_params into fill_note_info
      coredump: Use the vma snapshot in fill_files_note
      coredump: Don't compile flat_core_dump when coredumps are disabled
      a.out: Stop building a.out/osf1 support on alpha and m68k

Jann Horn (1):
      coredump: Also dump first pages of non-executable ELF libraries

Kees Cook (6):
      exec: Force single empty string when argv is empty
      selftests/exec: Test for empty string on NULL argv
      MAINTAINERS: Update execve entry with more details
      ELF: Properly redefine PT_GNU_* in terms of PT_LOOS
      binfmt_elf: Introduce KUnit test
      Merge branch 'coredump-vma-snapshot-fix-for-v5.18' of https://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace into for-next/execve

Rick Edgecombe (1):
      binfmt_elf: Don't write past end of notes for regset gap

Tom Rix (1):
      exec: cleanup comments

 MAINTAINERS                              |   4 +
 arch/alpha/Kconfig                       |   1 -
 arch/m68k/Kconfig                        |   1 -
 fs/Kconfig.binfmt                        |  10 ++
 fs/binfmt_elf.c                          | 153 +++++++++++++++++--------------
 fs/binfmt_elf_fdpic.c                    |  20 ++--
 fs/binfmt_elf_test.c                     |  64 +++++++++++++
 fs/binfmt_flat.c                         |   7 ++
 fs/compat_binfmt_elf.c                   |   2 +
 fs/coredump.c                            |  86 +++++++++++++----
 fs/exec.c                                |  32 ++++++-
 include/linux/binfmts.h                  |  15 +--
 include/linux/coredump.h                 |  20 +++-
 include/uapi/linux/elf.h                 |   7 +-
 tools/testing/selftests/exec/Makefile    |   1 +
 tools/testing/selftests/exec/null-argv.c |  78 ++++++++++++++++
 16 files changed, 374 insertions(+), 127 deletions(-)
 create mode 100644 fs/binfmt_elf_test.c
 create mode 100644 tools/testing/selftests/exec/null-argv.c

-- 
Kees Cook

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ