linux-kernel - Re: [PATCH] ARM: uaccess: Fix KASAN false-positives

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Wed, 15 Feb 2023 11:07:51 +0100
From:   "Arnd Bergmann" <arnd@...db.de>
To:     "Zev Weiss" <zev@...ilderbeest.net>,
        linux-arm-kernel@...ts.infradead.org, kasan-dev@...glegroups.com
Cc:     "Andrew Jeffery" <andrew@...id.au>,
        "Anshuman Khandual" <anshuman.khandual@....com>,
        "Dinh Nguyen" <dinguyen@...nel.org>,
        "Russell King" <linux@...linux.org.uk>,
        "Sam Ravnborg" <sam@...nborg.org>,
        "Stafford Horne" <shorne@...il.com>, linux-kernel@...r.kernel.org,
        openbmc@...ts.ozlabs.org,
        "Andrey Ryabinin" <ryabinin.a.a@...il.com>,
        "Alexander Potapenko" <glider@...gle.com>,
        "Andrey Konovalov" <andreyknvl@...il.com>,
        "Dmitry Vyukov" <dvyukov@...gle.com>,
        "Vincenzo Frascino" <vincenzo.frascino@....com>
Subject: Re: [PATCH] ARM: uaccess: Fix KASAN false-positives

On Wed, Feb 15, 2023, at 03:37, Zev Weiss wrote:
> From: Andrew Jeffery <andrew@...id.au>
>
> __copy_to_user_memcpy() and __clear_user_memset() had been calling
> memcpy() and memset() respectively, leading to false-positive KASAN
> reports when starting userspace:
>
>     [   10.707901] Run /init as init process
>     [   10.731892] process '/bin/busybox' started with executable stack
>     [   10.745234] 
> ==================================================================
>     [   10.745796] BUG: KASAN: user-memory-access in 
> __clear_user_memset+0x258/0x3ac
>     [   10.747260] Write of size 2687 at addr 000de581 by task init/1
>
> Use __memcpy() and __memset() instead to allow userspace access, which
> is of course the intent of these functions.
>
> Signed-off-by: Andrew Jeffery <andrew@...id.au>
> Signed-off-by: Zev Weiss <zev@...ilderbeest.net>

Looks good to me. I've added it to my randconfig build tree to
see if there are any build time regressions in odd configurations.
If you don't hear back from me until tomorrow, please add this to
Russell's patch system at 

https://www.arm.linux.org.uk/developer/patches/info.php

with my

Reviewed-by: Arnd Bergmann <arnd@...db.de>