Received: by 2002:ac0:a5a7:0:0:0:0:0 with SMTP id m36-v6csp5595448imm; Mon, 23 Jul 2018 02:32:45 -0700 (PDT) X-Google-Smtp-Source: AAOMgpe0eVEurd19e7Ym44Wo24g21txBGSBsubQGNqEFJqoWs5izhvrRgDktTPOkZnvBP7fsnmwI X-Received: by 2002:a63:6501:: with SMTP id z1-v6mr11670220pgb.419.1532338364945; Mon, 23 Jul 2018 02:32:44 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1532338364; cv=none; d=google.com; s=arc-20160816; b=mtqjV+f7pAlga8FzP9kxixGa0PMyOiv+z2iQRMNctd6GvBLuLlzVj+0MWeB049HkXD QmFXWeRvWsCbFUf6OaAz1aBMmTwTfCTFkcJMC4mNnpMiDITYbzProGIJbZqzjF1ygJQW 3rySV5VsM2SPJzDlEEelgsmz6eTjY3plmoFDJBV1q7qPV856P9zqD8wnH8okpIjF3cAz Hs/l0REsOGGrJyrnm+sITu13gC8cxuMfDfozNS2yGE2czr/HcH1qXFmbTfXWWKqN2WxW MGbY2fmmT8xhKqxhR/w+Nz3X8NRPP8zbKmACchO0dZP6Hb6zNVPvk3MOvg2m+D0xRenj RIGw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:mime-version:message-id:date:subject:cc :to:from:arc-authentication-results; bh=BtoHqvFDKCKJa9NQr+tBn79Izq+Juw4oGGlyIRTdfj8=; b=fIfK9iDwnrGNkZisS0LuWvYMoYP9bRI69G8j6Lt7/kUfxf+fW+x8RtcqU7EjiUqF1q 20XKFOBFHGCdAfYw7hLWWKvpafOzyBTVMKp0BoUcwwTFaG4BZ0vZaU+20JB7F3PQQm66 dLUM3HjML3JiH0KAEoxqcGnbR0EodQ+F8ShCYTT8B0NcLdZdZcaIbPzFKOarK0BeNohj JOE0lZFoS9C5PwTcssD9NFyL/hppvNJDjE1D5XfImut2aSFZwEzGw8lSxWadwj29469Y QTbAfPxKlWAICIJSWDYrnKJhOWaRBJrOuRIPu+N7XS2mXqSB/1AA15bSBZZSLDJASo+c j0lg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id g87-v6si8896097pfg.225.2018.07.23.02.32.29; Mon, 23 Jul 2018 02:32:44 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2388302AbeGWKbu (ORCPT + 99 others); Mon, 23 Jul 2018 06:31:50 -0400 Received: from mail.cn.fujitsu.com ([183.91.158.132]:29981 "EHLO heian.cn.fujitsu.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S2388217AbeGWKbu (ORCPT ); Mon, 23 Jul 2018 06:31:50 -0400 X-IronPort-AV: E=Sophos;i="5.43,368,1503331200"; d="scan'208";a="42543721" Received: from unknown (HELO cn.fujitsu.com) ([10.167.33.5]) by heian.cn.fujitsu.com with ESMTP; 23 Jul 2018 17:31:13 +0800 Received: from G08CNEXCHPEKD02.g08.fujitsu.local (unknown [10.167.33.83]) by cn.fujitsu.com (Postfix) with ESMTP id 04F3B4B5CF67; Mon, 23 Jul 2018 17:31:09 +0800 (CST) Received: from localhost (10.167.225.56) by G08CNEXCHPEKD02.g08.fujitsu.local (10.167.33.89) with Microsoft SMTP Server id 14.3.399.0; Mon, 23 Jul 2018 17:31:08 +0800 From: Chao Fan To: , , , , , , , CC: , , , Chao Fan Subject: [PATCH v4 0/4] x86/boot/KASLR: Parse ACPI table and limit kaslr in immovable memory. Date: Mon, 23 Jul 2018 17:29:04 +0800 Message-ID: <20180723092908.32656-1-fanc.fnst@cn.fujitsu.com> X-Mailer: git-send-email 2.17.1 MIME-Version: 1.0 Content-Type: text/plain X-yoursite-MailScanner-ID: 04F3B4B5CF67.ACCE4 X-yoursite-MailScanner: Found to be clean X-yoursite-MailScanner-From: fanc.fnst@cn.fujitsu.com X-Spam-Status: No Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org ***Background: People reported that kaslr may randomly chooses some positions which are located in movable memory regions. This will break memory hotplug feature and make the memory can't be removed. ***Solutions: There should be a method to limit kaslr to choosing immovable memory regions, so there are 2 solutions: 1) Add a kernel parameter to specify the memory regions. 2) Get the information of memory hotremove, then kaslr will know the right regions. In method 2, information about memory hot remove is in ACPI tables, which will be parsed after 'start_kernel', kaslr can't get the information. In method 1, users should know the regions address and specify in kernel parameter. In the earliest time, I tried to dig ACPI tabls to solve this problem. But I didn't splite the code in 'compressed/' and ACPI code, so the patch is hard to follow so refused by community. Somebody suggest to add a kernel parameter to specify the immovable memory so that limit kaslr in these regions. Then I make a patchset. After several versions, Ingo gave a suggestion: https://www.mail-archive.com/linux-kernel@vger.kernel.org/msg1634024.html Follow Ingo's suggestion, imitate the ACPI code to parse the acpi tables, so that the kaslr can get necessary memory information in ACPI tables. Since I think ACPI code is independent part, so copy the codes and functions to 'compressed/' directory, so that kaslr won't influence the initialization of ACPI. PATCH 1/4 Reuse the head file of linux/acpi.h, and copy a fcuntion from ACPI code. PATCH 2/4 Functions to parse ACPI code. PATCH 3/4 If 'CONFIG_MEMORY_HOTREMOVE' specified, walk all nodes and store the information of immovable memory regions. PATCH 4/4 According to the immovable memory regions, filter the immovable regions which KASLR can choose. ***Test results: - I did a very simple test, and it can get the memory information in bios and efi KVM guest machine, and put it by early printk. But no more tests, so it's with RFC tag. v1->v2: - Simplify some code. Follow Baoquan He's suggestion: - Reuse the head file of acpi code. v2->v3: - Test in more conditions, so remove the 'RFC' tag. - Change some comments. v3->v4: Follow Thomas Gleixner's suggetsion: - Put the whole efi related function into #define CONFIG_EFI and return false in the other stub. - Simplify two functions in head file. Any comments will be welcome. Chao Fan (4): x86/boot: Add acpitb.h to help parse acpi tables x86/boot: Add acpitb.c to parse acpi tables x86/boot/KASLR: Walk srat tables to filter immovable memory x86/boot/KASLR: Limit kaslr to choosing the immovable memory arch/x86/boot/compressed/Makefile | 4 + arch/x86/boot/compressed/acpitb.c | 251 ++++++++++++++++++++++++++++++ arch/x86/boot/compressed/acpitb.h | 7 + arch/x86/boot/compressed/kaslr.c | 121 ++++++++++++-- 4 files changed, 372 insertions(+), 11 deletions(-) create mode 100644 arch/x86/boot/compressed/acpitb.c create mode 100644 arch/x86/boot/compressed/acpitb.h -- 2.17.1