linux-kernel - Re: [PATCH] iio: core: Constify struct configfs_item_operations and configfs_group

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20251231172011.7e0b3cd1@jic23-huawei>
Date: Wed, 31 Dec 2025 17:20:11 +0000
From: Jonathan Cameron <jic23@...nel.org>
To: Christophe JAILLET <christophe.jaillet@...adoo.fr>
Cc: David Lechner <dlechner@...libre.com>, Nuno Sá
 <nuno.sa@...log.com>, Andy Shevchenko <andy@...nel.org>,
 linux-kernel@...r.kernel.org, kernel-janitors@...r.kernel.org,
 linux-iio@...r.kernel.org
Subject: Re: [PATCH] iio: core: Constify struct configfs_item_operations and
 configfs_group_operations

On Mon, 29 Dec 2025 12:27:43 +0100
Christophe JAILLET <christophe.jaillet@...adoo.fr> wrote:

> 'struct configfs_item_operations' and 'configfs_group_operations' are not
> modified in this driver.
> 
> Constifying these structures moves some data to a read-only section, so
> increases overall security, especially when the structure holds some
> function pointers.
> 
> On a x86_64, with allmodconfig:
> Before:
> ======
>    text	   data	    bss	    dec	    hex	filename
>    5037	   1528	     64	   6629	   19e5	drivers/iio/industrialio-sw-device.o
>    5509	   1528	     64	   7101	   1bbd	drivers/iio/industrialio-sw-trigger.o
> 
> After:
> =====
>    text	   data	    bss	    dec	    hex	filename
>    5133	   1432	     64	   6629	   19e5	drivers/iio/industrialio-sw-device.o
>    5605	   1432	     64	   7101	   1bbd	drivers/iio/industrialio-sw-trigger.o
> 
> Signed-off-by: Christophe JAILLET <christophe.jaillet@...adoo.fr>
Applied to the togreg branch of iio.git which I'll push out initially as testing
for 0-day to take a look at it.

Thanks,

Jonathan