linux-kernel - Re: [PATCH] execve: argument list space enlargement

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <202401101609.F791E52@keescook>
Date: Wed, 10 Jan 2024 16:13:21 -0800
From: Kees Cook <keescook@...omium.org>
To: alexs@...nel.org
Cc: Eric Biederman <ebiederm@...ssion.com>, linux-mm@...ck.org,
	linux-kernel@...r.kernel.org, Alex Shi <alexsshi@...cent.com>,
	Sergei Trofimovich <slyich@...il.com>, curlinhuang@...cent.com
Subject: Re: [PATCH] execve: argument list space enlargement

On Wed, Jan 03, 2024 at 09:07:22PM +0800, alexs@...nel.org wrote:
> From: Alex Shi <alexsshi@...cent.com>
> 
> Wechat using too long gcc parameters, then get a strace complain:
>   execve(...) = -1 E2BIG (Argument list too long)
> Have to increase the parameter space for this, stack has enough
> space for this enlargement.

This is the second request recently[1] to expand the argument list size,
but I remain somewhat unconvinced this needs fixing on the kernel side.

[1] https://lore.kernel.org/lkml/202310170957.DF7F7FE9FA@keescook/

If we do change it, though, as I mention in the thread above, I'd prefer
to leave the UAPI alone and just detach the kernel internals from that
hard-coded limit.

-Kees

> 
> Signed-off-by: Alex Shi <alexsshi@...cent.com>
> Cc: Alex Shi <alexsshi@...cent.com>
> To: linux-kernel@...r.kernel.org
> To: linux-mm@...ck.org
> To: Kees Cook <keescook@...omium.org>
> To: Eric Biederman <ebiederm@...ssion.com>
> ---
>  include/uapi/linux/binfmts.h | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/include/uapi/linux/binfmts.h b/include/uapi/linux/binfmts.h
> index c6f9450efc12..717f6cafe8dd 100644
> --- a/include/uapi/linux/binfmts.h
> +++ b/include/uapi/linux/binfmts.h
> @@ -12,7 +12,7 @@ struct pt_regs;
>   * prevent the kernel from being unduly impacted by misaddressed pointers.
>   * MAX_ARG_STRINGS is chosen to fit in a signed 32-bit integer.
>   */
> -#define MAX_ARG_STRLEN (PAGE_SIZE * 32)
> +#define MAX_ARG_STRLEN (PAGE_SIZE * 128)
>  #define MAX_ARG_STRINGS 0x7FFFFFFF
>  
>  /* sizeof(linux_binprm->buf) */
> -- 
> 2.43.0
> 

-- 
Kees Cook