Received: by 2002:a25:1985:0:0:0:0:0 with SMTP id 127csp4247958ybz; Mon, 20 Apr 2020 19:18:16 -0700 (PDT) X-Google-Smtp-Source: APiQypLN8InjaLp3xjcFqm5SkR+mmylPsacrZDKrdmWuf0Vm5y/FvebW231BftQZ2rs4o/jDy8of X-Received: by 2002:a17:906:1845:: with SMTP id w5mr18388266eje.287.1587435496397; Mon, 20 Apr 2020 19:18:16 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1587435496; cv=none; d=google.com; s=arc-20160816; b=JFQ0Lm/xgGdPiJoTrnwXtmOIvvagEvg3j+SjXzbUTF/KdmlvWBIEYOvZ0cAbTcT8IM tIx0GJ0ju24V/17kk0QnMYmP37z4ehv0XDirfo40x8rmIi/ESR0xI+fQ5MMkOUyyEj28 FnZ4CBQfGEcrzyfX2oNX/hEn0als3NMJVO6BLrmGzUodO6KwU4rSk0zc9qA0ZzNFzUy2 ix3Tt90CwFlgybnjBiFp/Oa+OtjXUzjlmUgDPUtcLmrr/FeIVnP59vTmXIWvxKMffnCI Fq6qHtvdqDxCDP5MBHCygGkVWu6MniS8DoCCzMaDLDN+vrihmA1QQzzU1ETenVVeqYZX FQAw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:cc:to:from:subject:references :mime-version:message-id:in-reply-to:date:dkim-signature; bh=xI7CPVWDT3QMUi6LNO2ihZsKVC6mOuE8D9NTHDoSwRg=; b=f8WCHbMKTv4J1KJR/SO99k9irCJ4kJaGTfAiEArtkRU/weneMM2I70Why28xcQWUhD caOYbMu7i0OsXRt+5Owlxj4/x5NjtwSy5LTvp2AE6nnhD9pFiuXTefM8Jijgkx4oa/z8 dwtbKCv6vgIJ16l5xBWAuFRRFj9decl1zXP46jAmSRl/KNgxllC3i3zXhcYHPWCvoQWi MscDHZsvs14cu6+WYOW8VYEnVIW2Jjr4Ifpp489LFTl2V6qmCpoZYpNLFTtTyRU2W98N nz+5sOE1eKw2Q/xJkzPXhGRJzmoNZ314/1lVmD/r1+5bcKbPbX1Mzv2kdiQGgzwB+9Y9 OLow== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=NsWMsy0t; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id e6si904923edc.18.2020.04.20.19.17.54; Mon, 20 Apr 2020 19:18:16 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20161025 header.b=NsWMsy0t; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726874AbgDUCPK (ORCPT + 99 others); Mon, 20 Apr 2020 22:15:10 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:48232 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-FAIL-OK-FAIL) by vger.kernel.org with ESMTP id S1726751AbgDUCPF (ORCPT ); Mon, 20 Apr 2020 22:15:05 -0400 Received: from mail-pf1-x449.google.com (mail-pf1-x449.google.com [IPv6:2607:f8b0:4864:20::449]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 3AA1DC061A0F for ; Mon, 20 Apr 2020 19:15:05 -0700 (PDT) Received: by mail-pf1-x449.google.com with SMTP id 18so11801121pfu.22 for ; Mon, 20 Apr 2020 19:15:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20161025; h=date:in-reply-to:message-id:mime-version:references:subject:from:to :cc; bh=xI7CPVWDT3QMUi6LNO2ihZsKVC6mOuE8D9NTHDoSwRg=; b=NsWMsy0tc64m0JGczaV7LdhsLlL0muqBD3WWfrrfmgnLPP65xuxkorBExS9/txu1L5 Q2FJmS/0GsmmQwHFFjgD0hHMN3SkL6X6n/bRzCTBpT4oi51norYdtt3JUCFXVOjTMdTU zX8qkKvs2OaLrSgua66YBsJS5dPG7c4gwq9VOIKkM0/eRtYaRNYKG9cyZ+LyS4DClEmY pzaQabeig0ncHcCbBfaRPkwq2fH/qcg3/pcn9c8yO0GtAogCHIQRoSTaV4t4e26dPKt2 J+40ix1dhL7f8bY+j+WCwuKnG8V6/Z8OrBwNRE8fUqsNlBYUL0T0J2gmXjjCrX5qDTjh JDdg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:in-reply-to:message-id:mime-version :references:subject:from:to:cc; bh=xI7CPVWDT3QMUi6LNO2ihZsKVC6mOuE8D9NTHDoSwRg=; b=QFMpMRCDpxWFQ/n/3yDn8aKSC0VGdGGxVlH5OBaMZDk2NHkNoz2afDsG5Waz9txDmo 2c2CdQS9wwPbmlsdO1ggJ32Nx4fUVne09jSvgpMfnlbVDNTOrMOIilX0/5bfw6DRDM/a B9orDyLHonk11y/FbOKGcoaRKAgB2v9o8EiJY7qCHzN9gs//9DL2Kf+O27vnvhGfsvjf laNsVW7LTM8MYNwtIPI+UmCsKYc/I+PKlh+mzzmpn/wD290zH1s/ZUppKmXe1rK8Xud9 /pNZZ8b3kGck1KUr4kUWTeUhtv4soo5GZPI8i6Qf8hA47HAjakwLqHiLUiHdI1vZO8Dj YjFg== X-Gm-Message-State: AGi0PuYtGrn4OVNx+GfnQ3f+4IRMsti3cvY2D08HMBaRLrHWSUL9uw0g e5b+a6kVWHhx4UOhGy8gRr7w1AXXgxToyd3YOF0= X-Received: by 2002:a17:90a:1f4b:: with SMTP id y11mr2841747pjy.136.1587435304444; Mon, 20 Apr 2020 19:15:04 -0700 (PDT) Date: Mon, 20 Apr 2020 19:14:44 -0700 In-Reply-To: <20200421021453.198187-1-samitolvanen@google.com> Message-Id: <20200421021453.198187-4-samitolvanen@google.com> Mime-Version: 1.0 References: <20191018161033.261971-1-samitolvanen@google.com> <20200421021453.198187-1-samitolvanen@google.com> X-Mailer: git-send-email 2.26.1.301.g55bc3eb7cb9-goog Subject: [PATCH v12 03/12] scs: add support for stack usage debugging From: Sami Tolvanen To: Will Deacon , Catalin Marinas , James Morse , Steven Rostedt , Ard Biesheuvel , Mark Rutland , Masahiro Yamada , Michal Marek , Ingo Molnar , Peter Zijlstra , Juri Lelli , Vincent Guittot Cc: Dave Martin , Kees Cook , Laura Abbott , Marc Zyngier , Masami Hiramatsu , Nick Desaulniers , Jann Horn , Miguel Ojeda , clang-built-linux@googlegroups.com, kernel-hardening@lists.openwall.com, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, Sami Tolvanen Content-Type: text/plain; charset="UTF-8" Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Implements CONFIG_DEBUG_STACK_USAGE for shadow stacks. When enabled, also prints out the highest shadow stack usage per process. Signed-off-by: Sami Tolvanen Reviewed-by: Kees Cook --- kernel/scs.c | 38 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) diff --git a/kernel/scs.c b/kernel/scs.c index 7eea2d97bd2d..147917e31adf 100644 --- a/kernel/scs.c +++ b/kernel/scs.c @@ -68,6 +68,43 @@ int scs_prepare(struct task_struct *tsk, int node) return 0; } +#ifdef CONFIG_DEBUG_STACK_USAGE +static unsigned long __scs_used(struct task_struct *tsk) +{ + unsigned long *p = __scs_base(tsk); + unsigned long *end = __scs_magic(p); + unsigned long s = (unsigned long)p; + + while (p < end && READ_ONCE_NOCHECK(*p)) + p++; + + return (unsigned long)p - s; +} + +static void scs_check_usage(struct task_struct *tsk) +{ + static unsigned long highest; + unsigned long used = __scs_used(tsk); + unsigned long prev; + unsigned long curr = highest; + + while (used > curr) { + prev = cmpxchg(&highest, curr, used); + + if (prev == curr) { + pr_info("%s (%d): highest shadow stack usage: " + "%lu bytes\n", + tsk->comm, task_pid_nr(tsk), used); + break; + } + + curr = prev; + } +} +#else +static inline void scs_check_usage(struct task_struct *tsk) {} +#endif + void scs_release(struct task_struct *tsk) { void *s; @@ -77,6 +114,7 @@ void scs_release(struct task_struct *tsk) return; WARN_ON(scs_corrupted(tsk)); + scs_check_usage(tsk); scs_account(tsk, -1); scs_free(s); -- 2.26.1.301.g55bc3eb7cb9-goog