Received: by 2002:ac0:a679:0:0:0:0:0 with SMTP id p54csp991041imp; Thu, 21 Feb 2019 15:54:55 -0800 (PST) X-Google-Smtp-Source: AHgI3IZVWmhFiQu3qF+iHgUPaVgnFfPJIqK49PNqnQ8JgJFZI53W+lYK15EnelVx6WM/gLwlHI9/ X-Received: by 2002:a63:6949:: with SMTP id e70mr1070805pgc.89.1550793295117; Thu, 21 Feb 2019 15:54:55 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1550793295; cv=none; d=google.com; s=arc-20160816; b=hjOPF7BxBZVlV03wUQcG6JxwH6HxYbtkiQcSQAM61XAS9wTjSm0tdwnaHpO2+cZceE fhKpDv+0z644dNNYKIb86ETDH54RbTWyUaaeRXo0QLu3++FjIHzhDFLGsIQWhB/cfsFs TNbaogZLpzhlRXNZXXZbfBBnaXKEWuUsgx2WBqFjwsuFMqihoU71iN9KXTxYnrD/X8GU JBfiVCLzX1P3pjud3QEjsQFl8BkY4hID7fIv7QdIrCMfMzfnL/hpGquuB7Q3x8+EoPhc 9dxljOwKx3gA6iK5/jZ75crxC4TirfO1q6y+MwtiWOUC+MywLzTUF8d62JQysv1YZAQ/ O8YQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:references:in-reply-to:message-id:date :subject:cc:to:from; bh=Y4ax2hOd4Buhijx/oNSuXPhWpslJbmlh2LJYha9eHFk=; b=e1U/DbgT7fU4m4u+sgChvkoNxmMCP8GN2/D9IRFiExgTw+Tzid4+d6+Dv5+HYOKHam xZJ+lFPY5zUHfw0LYqF4UaaijmadPn9O5wHYY6A4uM1qeddaW0E5G34HexVoj/Nw4T+w 5gH0Mvx1QAAkw/VUuQMskGGjTAcsKsMFHGdTg8bTSZBx9PFIqvaqNgfyUx4cHjBBGnFX svttq8hutwOieXhhkBa3PJhi7FBkyUSue+5tD+hPxgXfZlNMDqA0S9lHVlmLQLk8HiNj 9Wa+T/Y6oXn0Xuvc/q1Ur1TCpGOFwfc3ru1D/uDfxfBVHgnmXkDOa6/GKFHJrue6NXDm GBqg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id 3si235062plo.217.2019.02.21.15.54.40; Thu, 21 Feb 2019 15:54:55 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726935AbfBUXu5 (ORCPT + 99 others); Thu, 21 Feb 2019 18:50:57 -0500 Received: from mga14.intel.com ([192.55.52.115]:3139 "EHLO mga14.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726178AbfBUXuy (ORCPT ); Thu, 21 Feb 2019 18:50:54 -0500 X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga005.fm.intel.com ([10.253.24.32]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Feb 2019 15:50:54 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.58,397,1544515200"; d="scan'208";a="322394801" Received: from linksys13920.jf.intel.com (HELO rpedgeco-DESK5.jf.intel.com) ([10.54.75.11]) by fmsmga005.fm.intel.com with ESMTP; 21 Feb 2019 15:50:52 -0800 From: Rick Edgecombe To: Andy Lutomirski , Ingo Molnar Cc: linux-kernel@vger.kernel.org, x86@kernel.org, hpa@zytor.com, Thomas Gleixner , Borislav Petkov , Nadav Amit , Dave Hansen , Peter Zijlstra , linux_dti@icloud.com, linux-integrity@vger.kernel.org, linux-security-module@vger.kernel.org, akpm@linux-foundation.org, kernel-hardening@lists.openwall.com, linux-mm@kvack.org, will.deacon@arm.com, ard.biesheuvel@linaro.org, kristen@linux.intel.com, deneen.t.dock@intel.com, Nadav Amit , Kees Cook , Dave Hansen , Masami Hiramatsu , Rick Edgecombe Subject: [PATCH v3 01/20] x86/jump_label: Use text_poke_early() during early init Date: Thu, 21 Feb 2019 15:44:32 -0800 Message-Id: <20190221234451.17632-2-rick.p.edgecombe@intel.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20190221234451.17632-1-rick.p.edgecombe@intel.com> References: <20190221234451.17632-1-rick.p.edgecombe@intel.com> Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Nadav Amit There is no apparent reason not to use text_poke_early() during early-init, since no patching of code that might be on the stack is done and only a single core is running. This is required for the next patches that would set a temporary mm for text poking, and this mm is only initialized after some static-keys are enabled/disabled. Cc: Andy Lutomirski Cc: Kees Cook Cc: Dave Hansen Cc: Masami Hiramatsu Acked-by: Peter Zijlstra (Intel) Signed-off-by: Nadav Amit Signed-off-by: Rick Edgecombe --- arch/x86/kernel/jump_label.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/arch/x86/kernel/jump_label.c b/arch/x86/kernel/jump_label.c index f99bd26bd3f1..e7d8c636b228 100644 --- a/arch/x86/kernel/jump_label.c +++ b/arch/x86/kernel/jump_label.c @@ -50,7 +50,12 @@ static void __ref __jump_label_transform(struct jump_entry *entry, jmp.offset = jump_entry_target(entry) - (jump_entry_code(entry) + JUMP_LABEL_NOP_SIZE); - if (early_boot_irqs_disabled) + /* + * As long as only a single processor is running and the code is still + * not marked as RO, text_poke_early() can be used; Checking that + * system_state is SYSTEM_BOOTING guarantees it. + */ + if (system_state == SYSTEM_BOOTING) poker = text_poke_early; if (type == JUMP_LABEL_JMP) { -- 2.17.1