linux-kernel - [GIT PULL] hardening updates for v6.14-rc1 (fix1)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202501311331.B5B6D45@keescook>
Date: Fri, 31 Jan 2025 13:38:58 -0800
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Jakub Jelinek <jakub@...hat.com>,
	Kees Cook <kees@...nel.org>, Masahiro Yamada <masahiroy@...nel.org>,
	Nathan Chancellor <nathan@...nel.org>
Subject: [GIT PULL] hardening updates for v6.14-rc1 (fix1)

Hi Linus,

Please pull this hardening fix for v6.14-rc1. This is a fix for the soon
to be released GCC 15 which has regressed its initialization of unions
when performing explicit initialization (i.e. a general problem, not
specifically a hardening problem; we're just carrying the fix). Details
in the final patch, Acked by Masahiro, with updated selftests to validate
the fix.

Thanks!

-Kees

The following changes since commit a9a5e0bdc5a77a7c662ad4be0ad661f0b0d5e99d:

  hardening: Document INIT_STACK_ALL_PATTERN behavior with GCC (2025-01-08 14:17:33 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.14-rc1-fix1

for you to fetch changes up to dce4aab8441d285b9a78b33753e0bf583c1320ee:

  kbuild: Use -fzero-init-padding-bits=all (2025-01-30 08:48:34 -0800)

----------------------------------------------------------------
hardening updates for v6.14-rc1-fix1

- Fix regression in GCC 15's initialization of union members

----------------------------------------------------------------
Kees Cook (3):
      stackinit: Add old-style zero-init syntax to struct tests
      stackinit: Add union initialization to selftests
      kbuild: Use -fzero-init-padding-bits=all

 lib/stackinit_kunit.c      | 106 +++++++++++++++++++++++++++++++++++++++++++++
 scripts/Makefile.extrawarn |   3 ++
 2 files changed, 109 insertions(+)

-- 
Kees Cook