linux-kernel - [PATCH 0/3] Support intra-function call validation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20240226094925.95835-1-qirui.001@bytedance.com>
Date: Mon, 26 Feb 2024 17:49:22 +0800
From: Rui Qi <qirui.001@...edance.com>
To: bp@...en8.de,
	mingo@...hat.com,
	tglx@...utronix.de,
	hpa@...or.com,
	jpoimboe@...hat.com,
	peterz@...radead.org,
	mbenes@...e.cz,
	gregkh@...uxfoundation.org,
	stable@...r.kernel.org,
	alexandre.chartre@...cle.com
Cc: x86@...nel.org,
	linux-kernel@...r.kernel.org,
	Rui Qi <qirui.001@...edance.com>
Subject: [PATCH 0/3] Support intra-function call validation

Since kernel version 5.4.250 LTS, there has been an issue with the kernel live patching feature becoming unavailable. When compiling the sample code for kernel live patching, the following message is displayed when enabled:

livepatch: klp_check_stack: kworker/u256:6:23490 has an unreliable stack

After investigation, it was found that this is due to objtool not supporting intra-function calls, resulting in incorrect orc entry generation.

This patchset adds support for intra-function calls, allowing the kernel live patching feature to work correctly.

Alexandre Chartre (2):
  objtool: is_fentry_call() crashes if call has no destination
  objtool: Add support for intra-function calls

Rui Qi (1):
  x86/speculation: Support intra-function call validation

 arch/x86/include/asm/nospec-branch.h          |  7 ++
 include/linux/frame.h                         | 11 ++++
 .../Documentation/stack-validation.txt        |  8 +++
 tools/objtool/arch/x86/decode.c               |  6 ++
 tools/objtool/check.c                         | 64 +++++++++++++++++--
 5 files changed, 91 insertions(+), 5 deletions(-)

-- 
2.39.2 (Apple Git-143)