linux-kernel - [GIT PULL] hardening updates for v6.13-rc1

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202411210641.BB0D295A@keescook>
Date: Thu, 21 Nov 2024 06:42:43 -0800
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Andrew Morton <akpm@...ux-foundation.org>,
	Andy Shevchenko <andy@...nel.org>,
	Bartosz Golaszewski <bartosz.golaszewski@...aro.org>,
	"James E.J. Bottomley" <James.Bottomley@...senpartnership.com>,
	Jan Hendrik Farr <kernel@...rr.cc>, Kees Cook <kees@...nel.org>,
	kernel test robot <oliver.sang@...el.com>,
	Miguel Ojeda <ojeda@...nel.org>,
	Nathan Chancellor <nathan@...nel.org>,
	Philipp Reisner <philipp.reisner@...bit.com>,
	Thorsten Blum <thorsten.blum@...ux.dev>
Subject: [GIT PULL] hardening updates for v6.13-rc1

Hi Linus,

Please pull these hardening updates for v6.13-rc1. I delayed sending
this for several days just to make sure the Kconfig and compiler.h
changes got a little more bake-time in -next since they were added to my
tree pretty late in the cycle. All seems well, so here's the PR.

Thanks!

-Kees

The following changes since commit 8cf0b93919e13d1e8d4466eb4080a4c4d9d66d7b:

  Linux 6.12-rc2 (2024-10-06 15:32:27 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.13-rc1

for you to fetch changes up to f06e108a3dc53c0f5234d18de0bd224753db5019:

  Compiler Attributes: disable __counted_by for clang < 19.1.3 (2024-11-19 08:48:27 -0800)

----------------------------------------------------------------
hardening updates for v6.13-rc1

- Disable __counted_by in Clang < 19.1.3 (Jan Hendrik Farr)

- string_helpers: Silence output truncation warning (Bartosz Golaszewski)

- compiler.h: Avoid needing BUILD_BUG_ON_ZERO() (Philipp Reisner)

- MAINTAINERS: Add kernel hardening keywords __counted_by{_le|_be}
  (Thorsten Blum)

----------------------------------------------------------------
Bartosz Golaszewski (1):
      lib: string_helpers: silence snprintf() output truncation warning

Jan Hendrik Farr (1):
      Compiler Attributes: disable __counted_by for clang < 19.1.3

Philipp Reisner (1):
      compiler.h: Fix undefined BUILD_BUG_ON_ZERO()

Thorsten Blum (1):
      MAINTAINERS: Add kernel hardening keywords __counted_by{_le|_be}

 MAINTAINERS                         |  2 +-
 drivers/misc/lkdtm/bugs.c           |  2 +-
 include/linux/compiler.h            | 11 +++++++++--
 include/linux/compiler_attributes.h | 13 -------------
 include/linux/compiler_types.h      | 19 +++++++++++++++++++
 init/Kconfig                        |  9 +++++++++
 lib/overflow_kunit.c                |  2 +-
 lib/string_helpers.c                |  2 +-
 8 files changed, 41 insertions(+), 19 deletions(-)

-- 
Kees Cook