Received: by 10.223.185.116 with SMTP id b49csp6254980wrg; Wed, 28 Feb 2018 06:31:47 -0800 (PST) X-Google-Smtp-Source: AH8x2246OUZTjGoGgeXrO7KHZ4Jd7xx9RbV730nKq8+UZwXctzZqS+OlhirhIEVl5lqGrT6s9msf X-Received: by 10.99.175.87 with SMTP id s23mr14300565pgo.328.1519828307640; Wed, 28 Feb 2018 06:31:47 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1519828307; cv=none; d=google.com; s=arc-20160816; b=ot2f1CCy3IhUnwIbHUAbNQvsFNJ8vskPcF2RUC4+OfizTH399lejIFon06BfQFfszL ufL/xBJaLtQFmjhhU8CFY/68LvfzDGqmZXwS/Bieo+ByJxQpSXNEfWYdm3iTAWqGRFGB ClsJBraZG04YrrfRIhuVhqYgvg5YCBjLWjJeZea4YRzOOXgSARolfZjZZ5aJvb75FKGg m9e/QYlb5e5szT1rsnOshfcLBpi6Uncu8WbLEGgQVwov2QypKR6Tr9sTis4p6xNkzK4q Puq4k6YgaWezw6wTvkMWVmqBC2HfyQH3epVXeNyl1wu1NqbgqRbAOS4x+P/dulxvbT82 wFUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:content-disposition :mime-version:message-id:subject:cc:to:from:date:dkim-signature :arc-authentication-results; bh=PAXcxfqKsRssBG3g9JLPQQTJ+xYxS8QQMlC/qiutrtM=; b=f4zmG5hgKOGF/FufJPQ4lE2genX37X+vOioO4T+kfd1dPWxyPzUnoaL+7OSLY+21Mn UXC2iBXRebreYCru/xubHQhJTFqRyOskdahLUP+jQDA4vBtVd0rIzqP8KiPlPvfWiAT8 2hj6ycWPitPyXYcnujpJku13p3j/SnGSGeG4kkquYXpFX1tdmxPRycJWw6IgrUGkpb1p L5tsYW1eIPLIIPV2ZdxEcYcG6keDlX+mGCi8vQH/6MmnGSRkQFY6FhhwpNH+6NFcqI4b FI0xQRoUs0692ItzHRV72Z6yCpuoWVDfGy6PATSu3nBKjNumLedVVxo3BFC87nkL4sn4 3uTA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=Ql1ekRva; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id u7si1057341pgq.796.2018.02.28.06.31.29; Wed, 28 Feb 2018 06:31:47 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=Ql1ekRva; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932219AbeB1OaC (ORCPT + 99 others); Wed, 28 Feb 2018 09:30:02 -0500 Received: from mail-pl0-f67.google.com ([209.85.160.67]:39183 "EHLO mail-pl0-f67.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752420AbeB1OaB (ORCPT ); Wed, 28 Feb 2018 09:30:01 -0500 Received: by mail-pl0-f67.google.com with SMTP id s13-v6so1596485plq.6 for ; Wed, 28 Feb 2018 06:30:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=date:from:to:cc:subject:message-id:mime-version:content-disposition :user-agent; bh=PAXcxfqKsRssBG3g9JLPQQTJ+xYxS8QQMlC/qiutrtM=; b=Ql1ekRvaAFmRrynzNssJko5YOekgYK21HI9Y/NBS75L0CSUU3DW6uUA2XEGpejUWIz NGmlm9JHRFtjndq+H3aRXVgrn4WdIDM3KQrN6DKlB0CkZ5/UD+M5sJ5q4UuxD3ss/RWe +wbUb5scI2IIwrUpVJn/ycloa09lcdTHdf+bQNuKuzjaO0SdI9ROlh4Vh0WpFyHPw/rD RNxq36OFyIP4ljw6axZPyWemN4WbYGvuD5ShdhXOLIKEZWvZVbV4UhfOuTn6ra5znS47 8cnTX+H2eDkcr9TgsfZa7TKo6MwAgwnHw1CvI6fGfoF/5xPQlBtySLM1C1P/kmbtw8Tu 30cQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:mime-version :content-disposition:user-agent; bh=PAXcxfqKsRssBG3g9JLPQQTJ+xYxS8QQMlC/qiutrtM=; b=thR2fajg4JzCNFmQEK0LiNYd1ua3QdMtv1ojP8XhO+ITJdVo55zBS8DapJ+SQRKGDE plvinOVgkOvcOPostyCJHAvvQnGj5Q69395rxA2jD4Zh0ffxlx3WaHzQp+cofSOFurqF 158lRNT4G6mD5xWsLERB0wchJmMTs3qdT1XG17Le0sgBiEQhIfAREhVlC+Qj5VU8K2KL 6McS4kTHp0/C5tweyOMEpmlIoIzCJRQR77VF2/Ah1FfaZ/EEmqNCThWjwSS+FMBhohf6 I3S3Ik03DE+2MMJRNplbdgKfp2lSvKceewArilsCBWEQ0KB8iJFSeS4shRM0lFOfnO+R l4aQ== X-Gm-Message-State: APf1xPBoy0OMRMHYEjWSnKzRe24z05JA/sg+t6e4yLbJhASd9Yh8rPyB LjoRTdUpiYU9OSHzvOCy7Pc= X-Received: by 2002:a17:902:7290:: with SMTP id d16-v6mr16094262pll.31.1519828200614; Wed, 28 Feb 2018 06:30:00 -0800 (PST) Received: from pjb1027-Latitude-E5410 ([58.227.15.43]) by smtp.gmail.com with ESMTPSA id n67sm4070786pfh.150.2018.02.28.06.29.55 (version=TLS1_2 cipher=AES128-SHA bits=128/128); Wed, 28 Feb 2018 06:30:00 -0800 (PST) Date: Wed, 28 Feb 2018 23:29:51 +0900 From: Jinbum Park To: linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, kernel-hardening@lists.openwall.com Cc: pombredanne@nexb.co, gregkh@linuxfoundation.org, tglx@linutronix.de, kstewart@linuxfoundation.org, luto@amacapital.net, dsafonov@virtuozzo.com, keescook@chromium.org, will.deacon@arm.com, mark.rutland@arm.com, danielmicay@gmail.com, arnd@arndb.de, catalin.marinas@arm.com Subject: [kernel-hardening] [PATCH 1/2] arm: mm: Define vdso_start, vdso_end as array Message-ID: <20180228142951.GA3136@pjb1027-Latitude-E5410> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Define vdso_start, vdso_end as array to avoid compile-time analysis error for the case of built with CONFIG_FORTIFY_SOURCE. and, since vdso_start, vdso_end are used in vdso.c only, move extern-declaration from vdso.h to vdso.c. If kernel is built with CONFIG_FORTIFY_SOURCE, compile-time error happens at this code. - if (memcmp(&vdso_start, "\177ELF", 4)) The size of "&vdso_start" is recognized as 1 byte, but n is 4, So that compile-time error is reported. Signed-off-by: Jinbum Park --- arch/arm/include/asm/vdso.h | 2 -- arch/arm/kernel/vdso.c | 12 +++++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/arch/arm/include/asm/vdso.h b/arch/arm/include/asm/vdso.h index 9c99e81..5b85889 100644 --- a/arch/arm/include/asm/vdso.h +++ b/arch/arm/include/asm/vdso.h @@ -12,8 +12,6 @@ void arm_install_vdso(struct mm_struct *mm, unsigned long addr); -extern char vdso_start, vdso_end; - extern unsigned int vdso_total_pages; #else /* CONFIG_VDSO */ diff --git a/arch/arm/kernel/vdso.c b/arch/arm/kernel/vdso.c index a4d6dc0..f4dd7f9 100644 --- a/arch/arm/kernel/vdso.c +++ b/arch/arm/kernel/vdso.c @@ -39,6 +39,8 @@ static struct page **vdso_text_pagelist; +extern char vdso_start[], vdso_end[]; + /* Total number of pages needed for the data and text portions of the VDSO. */ unsigned int vdso_total_pages __ro_after_init; @@ -197,13 +199,13 @@ static int __init vdso_init(void) unsigned int text_pages; int i; - if (memcmp(&vdso_start, "\177ELF", 4)) { + if (memcmp(vdso_start, "\177ELF", 4)) { pr_err("VDSO is not a valid ELF object!\n"); return -ENOEXEC; } - text_pages = (&vdso_end - &vdso_start) >> PAGE_SHIFT; - pr_debug("vdso: %i text pages at base %p\n", text_pages, &vdso_start); + text_pages = (vdso_end - vdso_start) >> PAGE_SHIFT; + pr_debug("vdso: %i text pages at base %p\n", text_pages, vdso_start); /* Allocate the VDSO text pagelist */ vdso_text_pagelist = kcalloc(text_pages, sizeof(struct page *), @@ -218,7 +220,7 @@ static int __init vdso_init(void) for (i = 0; i < text_pages; i++) { struct page *page; - page = virt_to_page(&vdso_start + i * PAGE_SIZE); + page = virt_to_page(vdso_start + i * PAGE_SIZE); vdso_text_pagelist[i] = page; } @@ -229,7 +231,7 @@ static int __init vdso_init(void) cntvct_ok = cntvct_functional(); - patch_vdso(&vdso_start); + patch_vdso(vdso_start); return 0; } -- 1.9.1