Received: by 2002:ac0:a581:0:0:0:0:0 with SMTP id m1-v6csp230882imm; Mon, 2 Jul 2018 10:30:49 -0700 (PDT) X-Google-Smtp-Source: ADUXVKJraZ0IsTJobDUeuGjkHJe5hweKywN5UT91tN5VxbZy1ayzlAO/2w0okFCn35xPy7WNH3/F X-Received: by 2002:a63:2c0d:: with SMTP id s13-v6mr22991775pgs.37.1530552649726; Mon, 02 Jul 2018 10:30:49 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1530552649; cv=none; d=google.com; s=arc-20160816; b=RGQFmV1MAvkiuIIOOlZh1j9sqN+PV1QqCh99o0lwsTLn8izYQO+TagCflEEZQqypUR Tf3wAIJPrJ/ydQTV4bzyJGAQ7zBku9endPp1+xA2DIFThjLfHtv8rr+EoQTGGh3zCVUo OReMJZBNDr/BRaZ1SMybnuvimVprR5d1gKvKFMW96tO0JTSbtntcMMXudsc1H5ptOi1R irqDz398WN81BEkWWrRBVElqNGWFBcpdf5woHTV56kMJ9kfx8oymWjDKjIeDrwZaeESm b519yKHYECgG1H5Ztkkrj/n/s6NcEvGOX0KHvLK5Q9Kq8VSQgN+87xbMDeav/88FloNH YVVQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature:dkim-signature :arc-authentication-results; bh=WsdLDu5OaU7bna58R2kvyy/cN5DTIgA+YtqNBar7NWg=; b=BKt8Zuvtk+mmZSREA+fTaoiDYxaE0Kva10r2NSwmG1ShPuAdBL+f/mF2YoZegy1CQJ JvFIp4E6yGvXSpQSeC/LHDUeRuKoWkOWTf6lq67LYd7oTXKbP6SVsibgRFybwZOhKD8v FOcNg1hd3FZagOOyJ54ogf0POs1c88Q3FZ6EjnMYfAIj0KfFTN+V/+BYNZ6UOvDbDPJd IMiKrr0lo8n54WBWVXnRSnWxETwf0RwmlISk6/EPjn1FtzshGBcPUY1sRm+vOegr0zbR LcoBAWP3tKLLlfABfcp6xTzmIjYs4GOd5VWlCUh1BB0QihvcFXwdA834Ce0aTEaX/EK7 6cbg== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@google.com header.s=20161025 header.b=g3F+yEsY; dkim=fail header.i=@chromium.org header.s=google header.b=H3j2WHNa; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id a12-v6si6304018pgv.296.2018.07.02.10.30.34; Mon, 02 Jul 2018 10:30:49 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=fail header.i=@google.com header.s=20161025 header.b=g3F+yEsY; dkim=fail header.i=@chromium.org header.s=google header.b=H3j2WHNa; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752957AbeGBR31 (ORCPT + 99 others); Mon, 2 Jul 2018 13:29:27 -0400 Received: from mail-yb0-f193.google.com ([209.85.213.193]:39255 "EHLO mail-yb0-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752333AbeGBR30 (ORCPT ); Mon, 2 Jul 2018 13:29:26 -0400 Received: by mail-yb0-f193.google.com with SMTP id k127-v6so5373023ybk.6 for ; Mon, 02 Jul 2018 10:29:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=WsdLDu5OaU7bna58R2kvyy/cN5DTIgA+YtqNBar7NWg=; b=g3F+yEsYPuIS4EmE4BApJGdkJGMOWKPYyiCI3GKGOgiycXZIXTWNrH+Atw2OrvHy0f wuBlUFbr7rs8r8RTt0gkmNETMcd8yJMwUvBPLE9up/MREdEA/TRYVlO9hVdDCK/Ija5u q0BAIOBcYoo093+cBm999FDCYoSkgsemBpl+ifR7Pyzqes5YAgjabET9ABwECvJxoozy nYfRIgR7N6dC/WT1gf9LQp7OIIRSzgDgwVByJkb30vAYzhh2wnNa7Npx+nV6/uLY+wdA ilSqqaKlo6iHzOL47JEoEheHEPFD25tWRoOEPYzT5bJ3lZUDmMrHNQptdtNuL2ZjT7El qyQA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=WsdLDu5OaU7bna58R2kvyy/cN5DTIgA+YtqNBar7NWg=; b=H3j2WHNaX3zgm9VAOQFP+i2S3kde8xJBtXUAyXn7U8kwXXKhuIr0mxRx/rRESJUqu2 xKs/r0ktv+3PSoXGNj1C3eKFeR4HAqTUFbHBrBh+A/TFUsj69iIXbpWqGqHqX/8QoalJ acCrZoTPafeoRZwPEWgr1/BaYlEAFgEmvAMcA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=WsdLDu5OaU7bna58R2kvyy/cN5DTIgA+YtqNBar7NWg=; b=NRwNX1GcBVjxbPfJR0KgrGI6koIxl5KmtY7BLIZLKbyllpwN6p687MhBiEoh1/63uC YVxpjnyAXTLTqIQJAsKJfeEGwarNDEdp0KzBd+H3eIfOT/ECVNy3+VobdRbozDyMuL7Z jCnW48abNKlLduqsTy8SP8LDHT+gmIK5D7LNE3VEIAcYXYNsl/pwRdlfRqRNxck7ZxnB z/7rhOcyKwlJs6kaeb1Yff3lsMw3sI8u0RIqTVfKg//D5zJbp6PZUqxyzE4uH5zPELtK rXKWP5fe95gXaGUTrTtP4mQl5NzSvHnTSkdNz/JyJSFmDZHYqjLz8LeoHpVGTNcK8ILN 9d7A== X-Gm-Message-State: APt69E3a/cMLTiP6lcyecDx7nHZInwHT2fwOUWeCGa04iYazrCE+yhhX aA+V7I6x2s5dI86cGl0XZcWKm4dp4e7rBbqjYkACnQ== X-Received: by 2002:a25:a483:: with SMTP id g3-v6mr2696051ybi.309.1530552565079; Mon, 02 Jul 2018 10:29:25 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a25:5f51:0:0:0:0:0 with HTTP; Mon, 2 Jul 2018 10:29:24 -0700 (PDT) In-Reply-To: <20180702095931.GB28665@arm.com> References: <20180629190553.7282-1-labbott@redhat.com> <706dc06b-0157-89cb-33a6-d0b9d811dcf0@redhat.com> <20180702095931.GB28665@arm.com> From: Kees Cook Date: Mon, 2 Jul 2018 10:29:24 -0700 X-Google-Sender-Auth: A-Lwg-DmYgixkvxifuC9n8kMOhI Message-ID: Subject: Re: [PATCH] arm64: Clear the stack To: Will Deacon Cc: Laura Abbott , Mark Rutland , Ard Biesheuvel , Kernel Hardening , LKML , linux-arm-kernel , Alexander Popov , Catalin Marinas Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Will, On Mon, Jul 2, 2018 at 2:59 AM, Will Deacon wrote: > On Fri, Jun 29, 2018 at 01:25:20PM -0700, Kees Cook wrote: >> No worries! I've made the change locally and will push this out to >> -next unless there are objections? > > I'm a bit wary of conflicts in entry.S, since it's likely that we're going > to have a lot going on in there for 4.19. > > Could I take this via arm64 instead, please, or are there dependencies > on other parts of your tree? It depends on the plugin existing, but we could split it up so the arm64 part could go separately. It would just be a no-op in the arm64 tree since CONFIG_GCC_PLUGIN_STACKLEAK won't exist there. Whatever works best for you! -Kees -- Kees Cook Pixel Security