| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20250502225416.708936-3-kees@kernel.org> Date: Fri, 2 May 2025 15:54:15 -0700 From: Kees Cook <kees@...nel.org> To: Masahiro Yamada <masahiroy@...nel.org> Cc: Kees Cook <kees@...nel.org>, Justin Stitt <justinstitt@...gle.com>, Nathan Chancellor <nathan@...nel.org>, Nicolas Schier <nicolas.schier@...ux.dev>, Marco Elver <elver@...gle.com>, Andrey Konovalov <andreyknvl@...il.com>, Andrey Ryabinin <ryabinin.a.a@...il.com>, linux-kbuild@...r.kernel.org, kasan-dev@...glegroups.com, linux-hardening@...r.kernel.org, Petr Pavlu <petr.pavlu@...e.com>, Sebastian Andrzej Siewior <bigeasy@...utronix.de>, Richard Weinberger <richard@....at>, Anton Ivanov <anton.ivanov@...bridgegreys.com>, Johannes Berg <johannes@...solutions.net>, linux-kernel@...r.kernel.org, linux-um@...ts.infradead.org Subject: [PATCH v2 3/3] integer-wrap: Force full rebuild when .scl file changes Since the integer wrapping sanitizer's behavior depends on its associated .scl file, we must force a full rebuild if the file changes. Universally include a synthetic header file that is rebuilt when the .scl file changes, via compiler-version.h, since using "-include ..." is not possible in the case of having compiler flags removed via "filter-out" (which would remove all instances of "-include"). Signed-off-by: Kees Cook <kees@...nel.org> --- Cc: Masahiro Yamada <masahiroy@...nel.org> Cc: Justin Stitt <justinstitt@...gle.com> Cc: Nathan Chancellor <nathan@...nel.org> Cc: Nicolas Schier <nicolas.schier@...ux.dev> Cc: Marco Elver <elver@...gle.com> Cc: Andrey Konovalov <andreyknvl@...il.com> Cc: Andrey Ryabinin <ryabinin.a.a@...il.com> Cc: <linux-kbuild@...r.kernel.org> Cc: <kasan-dev@...glegroups.com> Cc: <linux-hardening@...r.kernel.org> --- include/linux/compiler-version.h | 3 +++ scripts/Makefile.ubsan | 1 + scripts/basic/Makefile | 9 +++++++++ 3 files changed, 13 insertions(+) diff --git a/include/linux/compiler-version.h b/include/linux/compiler-version.h index 05d555320a0f..9d6b1890ffc7 100644 --- a/include/linux/compiler-version.h +++ b/include/linux/compiler-version.h @@ -19,3 +19,6 @@ #ifdef RANDSTRUCT #include "randstruct_hash.h" #endif +#ifdef INTEGER_WRAP +#include "integer-wrap.h" +#endif diff --git a/scripts/Makefile.ubsan b/scripts/Makefile.ubsan index 9e35198edbf0..653f7117819c 100644 --- a/scripts/Makefile.ubsan +++ b/scripts/Makefile.ubsan @@ -15,6 +15,7 @@ ubsan-cflags-$(CONFIG_UBSAN_TRAP) += $(call cc-option,-fsanitize-trap=undefined export CFLAGS_UBSAN := $(ubsan-cflags-y) ubsan-integer-wrap-cflags-$(CONFIG_UBSAN_INTEGER_WRAP) += \ + -DINTEGER_WRAP \ -fsanitize-undefined-ignore-overflow-pattern=all \ -fsanitize=signed-integer-overflow \ -fsanitize=unsigned-integer-overflow \ diff --git a/scripts/basic/Makefile b/scripts/basic/Makefile index 31637ce4dc5c..04f5620a3f8b 100644 --- a/scripts/basic/Makefile +++ b/scripts/basic/Makefile @@ -15,3 +15,12 @@ $(obj)/randstruct_hash.h $(obj)/randstruct.seed: $(gen-randstruct-seed) FORCE $(call if_changed,create_randstruct_seed) always-$(CONFIG_RANDSTRUCT) += randstruct.seed randstruct_hash.h + +# integer-wrap: if the .scl file changes, we need to do a full rebuild. +quiet_cmd_integer_wrap_updated = UPDATE $@ + cmd_integer_wrap_updated = echo '/* $^ */' > $(obj)/integer-wrap.h + +$(obj)/integer-wrap.h: $(srctree)/scripts/integer-wrap-ignore.scl FORCE + $(call if_changed,integer_wrap_updated) + +always-$(CONFIG_UBSAN_INTEGER_WRAP) += integer-wrap.h -- 2.34.1
Powered by blists - more mailing lists