linux-kernel - [GIT PULL] hardening fixes for v6.14-rc2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <202502081241.8997DC3@keescook>
Date: Sat, 8 Feb 2025 12:43:42 -0800
From: Kees Cook <kees@...nel.org>
To: Linus Torvalds <torvalds@...ux-foundation.org>
Cc: linux-kernel@...r.kernel.org, Geert Uytterhoeven <geert@...ux-m68k.org>,
	Geert Uytterhoeven <geert+renesas@...der.be>,
	Kees Cook <kees@...nel.org>,
	Kent Overstreet <kent.overstreet@...ux.dev>,
	kernel test robot <lkp@...el.com>, Miguel Ojeda <ojeda@...nel.org>,
	Suren Baghdasaryan <surenb@...gle.com>
Subject: [GIT PULL] hardening fixes for v6.14-rc2

Hi Linus,

Please pull these hardening fixes for v6.14-rc2. Addresses a KUnit stack
initialization regression that got tickled on m68k, and solves a Clang
(v14 and earlier) bug found by 0day.

Thanks!

-Kees

The following changes since commit dce4aab8441d285b9a78b33753e0bf583c1320ee:

  kbuild: Use -fzero-init-padding-bits=all (2025-01-30 08:48:34 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/kees/linux.git tags/hardening-v6.14-rc2

for you to fetch changes up to 6270f4deba3fbd77d1717fb8634f1fc612ff69e2:

  string.h: Use ARRAY_SIZE() for memtostr*()/strtomem*() (2025-02-06 18:48:04 -0800)

----------------------------------------------------------------
hardening fixes for v6.14-rc2

- Fix stackinit KUnit regression on m68k

- Use ARRAY_SIZE() for memtostr*()/strtomem*()

----------------------------------------------------------------
Geert Uytterhoeven (1):
      stackinit: Fix comment for test_small_end

Kees Cook (4):
      stackinit: Keep selftest union size small on m68k
      compiler.h: Move C string helpers into C-only kernel section
      compiler.h: Introduce __must_be_byte_array()
      string.h: Use ARRAY_SIZE() for memtostr*()/strtomem*()

 include/linux/compiler.h | 32 +++++++++++++++++++-------------
 include/linux/string.h   | 12 ++++++++----
 lib/stackinit_kunit.c    |  6 ++++--
 3 files changed, 31 insertions(+), 19 deletions(-)

-- 
Kees Cook