linux-kernel - Re: Dangerous addr to ctrl dependency transformation in fs/nfs/delegation.c::nfs_server_return_marked

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <C90EF3D6-CB26-48D3-A600-A4237C4BE4EC@in.tum.de>
Date:   Wed, 22 Jun 2022 11:05:15 +0200
From:   Paul Heidekrüger <Paul.Heidekrueger@...tum.de>
To:     Nick Desaulniers <ndesaulniers@...gle.com>
Cc:     "Jose E. Marchesi" <jemarch@....org>,
        Alan Stern <stern@...land.harvard.edu>,
        Andrea Parri <parri.andrea@...il.com>,
        Will Deacon <will@...nel.org>,
        Peter Zijlstra <peterz@...radead.org>,
        Boqun Feng <boqun.feng@...il.com>,
        Nicholas Piggin <npiggin@...il.com>,
        David Howells <dhowells@...hat.com>,
        Jade Alglave <j.alglave@....ac.uk>,
        Luc Maranget <luc.maranget@...ia.fr>,
        "Paul E. McKenney" <paulmck@...nel.org>,
        Akira Yokosawa <akiyks@...il.com>,
        Daniel Lustig <dlustig@...dia.com>,
        Joel Fernandes <joel@...lfernandes.org>,
        LKML <linux-kernel@...r.kernel.org>,
        linux-arch <linux-arch@...r.kernel.org>,
        clang-built-linux <llvm@...ts.linux.dev>,
        Marco Elver <elver@...gle.com>,
        Charalampos Mainas <charalampos.mainas@...il.com>,
        Pramod Bhatotia <pramod.bhatotia@...tum.de>
Subject: Re: Dangerous addr to ctrl dependency transformation in
 fs/nfs/delegation.c::nfs_server_return_marked_delegations()?


> On 22. Jun 2022, at 00:05, Nick Desaulniers <ndesaulniers@...gle.com> wrote:
> 
> On Tue, May 17, 2022 at 3:29 PM Nick Desaulniers
> <ndesaulniers@...gle.com> wrote:
>> On Fri, Apr 22, 2022 at 3:39 AM Paul Heidekrüger
>> <paul.heidekrueger@...tum.de> wrote:
>>> On Thu, Apr 14, 2022 at 02:21:25PM -0700, Nick Desaulniers wrote:
>>>> On Thu, Apr 7, 2022 at 8:22 AM Paul Heidekrüger
>>>> <paul.heidekrueger@...tum.de> wrote:
>>>>> Hi all,
>>>>> 
>>>>> work on my dependency checker tool is progressing nicely, and it is
>>>>> flagging, what I believe is, a harmful addr to ctrl dependency
>>>>> transformation. For context, see [1] and [2]. I'm using the Clang
>>>>> compiler.
>>>>> [1]: https://linuxplumbersconf.org/event/7/contributions/821/attachments/598/1075/LPC_2020_--_Dependency_ordering.pdf
>>>>> [2]: https://lore.kernel.org/llvm/YXknxGFjvaB46d%2Fp@Pauls-MacBook-Pro/T/#u
>>>> 
>>>> Hi Paul,
>>>> Thanks for the report and your (and your team's) work on this tool.
>>>> Orthogonal to your report, Jose (cc'ed) and I are currently in the
>>>> planning process to put together a Kernel+Toolchain microconference
>>>> track at Linux Plumbers Conference [0] this year (Sept 12-14) in
>>>> Dublin, Ireland. Would you or someone from your group be able and
>>>> interested in presenting more information about your work to an
>>>> audience of kernel and toolchain developers at such an event?
>>>> 
>>>> Would others be interested in such a topic? (What do they say in
>>>> Starship Troopers...?...Would you like to know more?)
>>>> 
>>>> [0] https://lpc.events/event/16/
>>>> --
>>>> Thanks,
>>>> ~Nick Desaulniers
>>> 
>>> Hi Nick and Jose,
>>> 
>>> Many thanks for inviting us! I would love to do a talk at LPC! Hopefully
>>> in person too.
>>> 
>>> Given that there have been several talks around this topic at LPC
>>> already, it seems very fitting, and we'll hopefully have more to share
>>> by then. Actually we have more to share already :-)
>>> 
>>> https://lore.kernel.org/all/YmKE%2FXgmRnGKrBbB@Pauls-MacBook-Pro.local/T/#u
>>> 
>>> I assume we will have to submit an abstract soon?
>> 
>> Yes, if you go to: https://lpc.events/event/16/abstracts/
>> 
>> click "Submit new abstract" in the bottom right.
>> 
>> Under the "Track" dropdown, please select "Toolchains Track."
> 
> Hi Paul, we'll need all proposals soon.
> If you're still considering attending Linux Plumbers conf, please
> submit a proposal:
> https://lpc.events/event/16/abstracts/
> Please make sure to select "Toolchains Track" as the "Track" after
> clicking on "Submit new abstract."

Hi Nick,

Of course! :-)

Sorry for taking so long, and thanks for reminding! I was under the
impression the deadline was sometime mid-August and therefore hadn't
prioritised it high enough - sorry!

You'll have the proposal ASAP.

Many thanks,
Paul

>> --
>> Thanks,
>> ~Nick Desaulniers
> 
> 
> 
> -- 
> Thanks,
> ~Nick Desaulniers

Download attachment "smime.p7s" of type "application/pkcs7-signature" (5449 bytes)