[RFC PATCH v1 40/50] arch/*/include/asm/stackprotector.h: Use get_random_canary() consistently
Will Deacon
will at kernel.org
Tue Apr 21 06:42:39 AEST 2020
On Tue, Dec 10, 2019 at 12:35:14AM -0500, George Spelvin wrote:
> ... in boot_init_stack_canary().
>
> This is the archetypical example of where the extra security of
> get_random_bytes() is wasted. The canary is only important as
> long as it's stored in __stack_chk_guard.
>
> It's also a great example of code that has been copied around
> a lot and not updated.
>
> Remove the XOR with LINUX_VERSION_CODE as it's pointless; the inclusion
> of utsname() in init_std_data in the random seeding obviates it.
>
> The XOR with the TSC on x86 and mtfb() on powerPC were left in,
> as I haven't proved them redundant yet. For those, we call
> get_random_long(), xor, and mask manually.
>
> FUNCTIONAL CHANGE: mips and xtensa were changed from 64-bit
> get_random_long() to 56-bit get_random_canary() to match the
> others, in accordance with the logic in CANARY_MASK.
>
> (We could do 1 bit better and zero *one* of the two high bytes.)
>
> Signed-off-by: George Spelvin <lkml at sdf.org>
> Cc: Russell King <linux at armlinux.org.uk>
> Cc: linux-arm-kernel at lists.infradead.org
> Cc: Catalin Marinas <catalin.marinas at arm.com>
> Cc: Will Deacon <will at kernel.org>
> Cc: Ralf Baechle <ralf at linux-mips.org>
> Cc: Paul Burton <paulburton at kernel.org>
> Cc: James Hogan <jhogan at kernel.org>
> Cc: linux-mips at vger.kernel.org
> Cc: Benjamin Herrenschmidt <benh at kernel.crashing.org>
> Cc: Paul Mackerras <paulus at samba.org>
> Cc: Michael Ellerman <mpe at ellerman.id.au>
> Cc: linuxppc-dev at lists.ozlabs.org
> Cc: Yoshinori Sato <ysato at users.sourceforge.jp>
> Cc: Rich Felker <dalias at libc.org>
> Cc: linux-sh at vger.kernel.org
> Cc: Thomas Gleixner <tglx at linutronix.de>
> Cc: Ingo Molnar <mingo at redhat.com>
> Cc: Borislav Petkov <bp at alien8.de>
> Cc: "H. Peter Anvin" <hpa at zytor.com>
> Cc: x86 at kernel.org
> Cc: Chris Zankel <chris at zankel.net>
> Cc: Max Filippov <jcmvbkbc at gmail.com>
> Cc: linux-xtensa at linux-xtensa.org
> ---
> arch/arm/include/asm/stackprotector.h | 9 +++------
> arch/arm64/include/asm/stackprotector.h | 8 ++------
> arch/mips/include/asm/stackprotector.h | 7 ++-----
> arch/powerpc/include/asm/stackprotector.h | 6 ++----
> arch/sh/include/asm/stackprotector.h | 8 ++------
> arch/x86/include/asm/stackprotector.h | 4 ++--
> arch/xtensa/include/asm/stackprotector.h | 7 ++-----
> 7 files changed, 15 insertions(+), 34 deletions(-)
Just found this kicking around in the depths of my inbox. Is the series
dead?
Will
More information about the Linuxppc-dev
mailing list