Received: by 2002:ac0:a5a7:0:0:0:0:0 with SMTP id m36-v6csp1205197imm; Wed, 11 Jul 2018 20:06:20 -0700 (PDT) X-Google-Smtp-Source: AAOMgpeHPx8IjSSzmnoKHH/21onWMVOuuO+WOC5EDIYcyGB3fvfFkLh6gfAwIIOU0UTQOk+/hbZf X-Received: by 2002:a17:902:89:: with SMTP id a9-v6mr452383pla.326.1531364780820; Wed, 11 Jul 2018 20:06:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1531364780; cv=none; d=google.com; s=arc-20160816; b=hETxwpVpRz3FA0KMuZs5ZIOH+Z+mGGT1+Hor4VVSfMQJDwgqLWXszElHfk3g3ZPerH CztRyKAq8CI+YG+TfrRMCUWUs3lSBAvrjmP9gUs2i4PTFHC4WqhK28kreYwMW3p0Gjt3 Ho4RxQWSiruIvKAwMHJM033UP4JaEtpPoqKnLv2EJzL2qrU1TbKjkZ/IQIpJ4itz75yf AHUvTWmr/ZPOCYbFyxGnys5x5k5ckLDlSoDA0TSUHQR924j/EBf1uSBs9FZ+wkB44t5+ Yvat7mr1RhiY2WRI0oBY9HgFNx8eiNN8DigqeRxI4XQMLIONVlEA1nsVc34hHD55os69 rWmA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:subject:message-id:date:from :references:in-reply-to:mime-version:dkim-signature:dkim-signature :arc-authentication-results; bh=fbyXeXY9K+gQYs5EYLT4iRofdz4Bdw2dGqT7Y+YVjy0=; b=wdyK0O1rXpsF9wdVJ+f409uHuQT2aSANfo06oszNeOXODiQDy+/+2f3SnlS0IFAt2R N1NUJQOUUlWv+soodKD+XmA78llfDpBp4UcrSnHqXqJ6+FTKo3fUthUWM5ryIiDUabxs 7gZJOQHZf6wnYYQDpMgcpEyqn2KcwZQg5n3H1PpG11aEbylHOThCamjej1qPYmJi3I4V D+i3bqEf7NL7s1Ro7ryYfdtjrM7BSkOl3t6Q86urgLJ3mOKQnqXHs1nfFrHgxaCkpaY/ 9W3pQWQm2MP0z34SSXk4RLZV3BQu9Cqhd2A2e+clrJOixc+durVCsh89xTar1RZaljWJ lrKw== ARC-Authentication-Results: i=1; mx.google.com; dkim=fail header.i=@google.com header.s=20161025 header.b=py21BhrT; dkim=fail header.i=@chromium.org header.s=google header.b=PuelOli0; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=chromium.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id u8-v6si20246654plh.492.2018.07.11.20.06.06; Wed, 11 Jul 2018 20:06:20 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=fail header.i=@google.com header.s=20161025 header.b=py21BhrT; dkim=fail header.i=@chromium.org header.s=google header.b=PuelOli0; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=chromium.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2390033AbeGLAMT (ORCPT + 99 others); Wed, 11 Jul 2018 20:12:19 -0400 Received: from mail-yb0-f193.google.com ([209.85.213.193]:36419 "EHLO mail-yb0-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1732348AbeGLAMT (ORCPT ); Wed, 11 Jul 2018 20:12:19 -0400 Received: by mail-yb0-f193.google.com with SMTP id s1-v6so10753761ybk.3 for ; Wed, 11 Jul 2018 17:05:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=fbyXeXY9K+gQYs5EYLT4iRofdz4Bdw2dGqT7Y+YVjy0=; b=py21BhrTLz4almdWQyx+ecVg1qRuNjZ23MlndgJYfb9DpZLow/372O0Ydus9/Rh14C iNTysvvvWS1PaeJEXhKtCQxVn94rvxToqgzmxCTiwX2MQYbzEcLvlhD6jj1q3Dnn3y1D w3cXndooFahsqeT9qk2zRZAIa4GmFIiq5M5GUHQ+R/tqmRQ/NK5W3RVo1O9NI/QZVn9+ eYGxEzYmys3tJqzsyWNSyQYYs8TyKgE7QS6BroVUZevIjaV0Tj6JJs2mra/QmenFV+uM B9Im0oRlEx/+IRQGEfc197D5Ea2ptdyF9dcVd/WLJyv4cWdh5eByyIagurYgWNB3XKaC 78kA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=fbyXeXY9K+gQYs5EYLT4iRofdz4Bdw2dGqT7Y+YVjy0=; b=PuelOli0tWhA5STElVHfqvsfuAWBq3r0Yv6X8Mr+lMtjbTYEn72H0FHJlDaP7EesZU FoidAlVIN3002autLKB5z6IWUXqnWzCFmgMbj9Zy/eirH2OEAAndry893nBPxZM+vwor Y0OihMKcfSIhwjCDNQaTH/bX4/jfdG9iiqJVc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=fbyXeXY9K+gQYs5EYLT4iRofdz4Bdw2dGqT7Y+YVjy0=; b=r2zr/W/QA4HxDXKeX53QXeEEv9XgACGhwgbk7NqVXwxkkGAVknPjYkG7bClKmlVoLE sEh7olQ/byDfp558HNLXmhtOb4p/RSHpGIKsuD3gxG55FSN9UEivtKplotiWdb926Mcw Rnryla42Loi66z5nvl3gC7WDOAkWz+u2N3lhjgIS00bP8z0DkqvWImkZT+Fv9ZC4Vbf8 vpCXcGM5C0u1ckR2etyfcQl1/Lj88/30p/YmH3rxJYU1l+1QSV7zGkaXk0ABXKFIzE60 zRlosDXJQSRjwh6raduClIugEB3QX7cebALjBQ8BRRRI5XjWwgYzjCJsb5KPxOAF4qxr b/ag== X-Gm-Message-State: AOUpUlF6q18U0xxmLqjEZ49x9Shu/hclXt7vBnP7/joLO8mbmjSoipaO Di3my+dtsQhS0uVzlQB2/oGhsO09hY8CDbyIeYyzAQ== X-Received: by 2002:a25:b219:: with SMTP id i25-v6mr14148ybj.112.1531353932879; Wed, 11 Jul 2018 17:05:32 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a25:5f51:0:0:0:0:0 with HTTP; Wed, 11 Jul 2018 17:05:32 -0700 (PDT) In-Reply-To: <20180629190553.7282-1-labbott@redhat.com> References: <20180629190553.7282-1-labbott@redhat.com> From: Kees Cook Date: Wed, 11 Jul 2018 17:05:32 -0700 X-Google-Sender-Auth: hsmU3eX6kWo8IJR4qLkM5WXHdWk Message-ID: Subject: Re: [PATCH] arm64: Clear the stack To: Laura Abbott Cc: Alexander Popov , Mark Rutland , Ard Biesheuvel , Kernel Hardening , linux-arm-kernel , LKML Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Jun 29, 2018 at 12:05 PM, Laura Abbott wrote: > include/linux/stackleak.h | 1 + > [...] > diff --git a/include/linux/stackleak.h b/include/linux/stackleak.h > index e2da99b3a191..00d62b302efb 100644 > --- a/include/linux/stackleak.h > +++ b/include/linux/stackleak.h > @@ -5,6 +5,7 @@ > #include > #include > > +#include > /* > * Check that the poison value points to the unused hole in the > * virtual memory map for your platform. FYI, I squashed this change into my copy of the stackleak v14 series. (And I just sent this arm64 patch with the adjustments for it to be stand-alone.) -Kees -- Kees Cook Pixel Security